https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-4712.htmlhttps://patchthecve.com/cve/CVE-2005-4712.htmlTue, 16 Jun 2026 22:19:17 +0000MEDIUM 5.0: CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has disputed CVE-2005-3497, and it is possible that the dispute was intended to include this issue as well.https://patchthecve.com/cve/CVE-2005-3497.htmlhttps://patchthecve.com/cve/CVE-2005-3497.htmlTue, 16 Jun 2026 22:17:04 +0000HIGH 7.5: SQL injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter. NOTE: on 20060210, the vendor disputed this issue, saying "this is 100% false reporting, this is a slander campaign from a customer who had a vhttps://patchthecve.com/cve/CVE-2005-3496.htmlhttps://patchthecve.com/cve/CVE-2005-3496.htmlTue, 16 Jun 2026 22:17:04 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg parameter to msg.php. NOTE: some sources identify a second vector in the login parameter to process_signup.php, but the original source says that it is for CRLF inj