https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-1005.htmlhttps://patchthecve.com/cve/CVE-2005-1005.htmlTue, 16 Jun 2026 22:12:15 +0000HIGH 7.5: ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter.https://patchthecve.com/cve/CVE-2005-1004.htmlhttps://patchthecve.com/cve/CVE-2005-1004.htmlTue, 16 Jun 2026 22:12:15 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.https://patchthecve.com/cve/CVE-2005-1003.htmlhttps://patchthecve.com/cve/CVE-2005-1003.htmlTue, 16 Jun 2026 22:12:15 +0000HIGH 7.5: Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.