https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-3983.htmlhttps://patchthecve.com/cve/CVE-2006-3983.htmlTue, 16 Jun 2026 22:28:12 +0000HIGH 7.5: PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter.https://patchthecve.com/cve/CVE-2002-2424.htmlhttps://patchthecve.com/cve/CVE-2002-2424.htmlTue, 16 Jun 2026 22:01:16 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag.https://patchthecve.com/cve/CVE-2002-0958.htmlhttps://patchthecve.com/cve/CVE-2002-0958.htmlTue, 16 Jun 2026 21:58:27 +0000HIGH 7.5: Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section.