https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-0292.htmlhttps://patchthecve.com/cve/CVE-2008-0292.htmlTue, 16 Jun 2026 22:49:19 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2005-1115.htmlhttps://patchthecve.com/cve/CVE-2005-1115.htmlTue, 16 Jun 2026 22:12:27 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or (2) album_comment.php.https://patchthecve.com/cve/CVE-2005-1114.htmlhttps://patchthecve.com/cve/CVE-2005-1114.htmlTue, 16 Jun 2026 22:12:27 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the (1) mode or (2) search parameters.