https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2010-4914.htmlhttps://patchthecve.com/cve/CVE-2010-4914.htmlTue, 16 Jun 2026 23:25:47 +0000HIGH 7.5: PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter.https://patchthecve.com/cve/CVE-2008-5806.htmlhttps://patchthecve.com/cve/CVE-2008-5806.htmlTue, 16 Jun 2026 23:01:02 +0000HIGH 7.5: SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the admin_username parameter (aka admin field). NOTE: some of these details are obtained from third party information.https://patchthecve.com/cve/CVE-2008-5805.htmlhttps://patchthecve.com/cve/CVE-2008-5805.htmlTue, 16 Jun 2026 23:01:01 +0000HIGH 7.5: SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828.https://patchthecve.com/cve/CVE-2008-0137.htmlhttps://patchthecve.com/cve/CVE-2008-0137.htmlTue, 16 Jun 2026 22:49:00 +0000HIGH 7.5: PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_escape parameter.https://patchthecve.com/cve/CVE-2007-2254.htmlhttps://patchthecve.com/cve/CVE-2007-2254.htmlTue, 16 Jun 2026 22:39:13 +0000HIGH 7.5: PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.