https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-6892.htmlhttps://patchthecve.com/cve/CVE-2006-6892.htmlTue, 16 Jun 2026 22:34:00 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable.https://patchthecve.com/cve/CVE-2006-5809.htmlhttps://patchthecve.com/cve/CVE-2006-5809.htmlTue, 16 Jun 2026 22:31:55 +0000HIGH 10.0: Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors.https://patchthecve.com/cve/CVE-2005-3918.htmlhttps://patchthecve.com/cve/CVE-2005-3918.htmlTue, 16 Jun 2026 22:17:53 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial.