https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6296.htmlhttps://patchthecve.com/cve/CVE-2008-6296.htmlTue, 16 Jun 2026 23:01:58 +0000HIGH 7.5: admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting the user cookie to "demo."https://patchthecve.com/cve/CVE-2008-5648.htmlhttps://patchthecve.com/cve/CVE-2008-5648.htmlTue, 16 Jun 2026 23:00:43 +0000HIGH 7.5: SQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrary SQL commands via the admin_username parameter. NOTE: some of these details are obtained from third party information.https://patchthecve.com/cve/CVE-2008-4880.htmlhttps://patchthecve.com/cve/CVE-2008-4880.htmlTue, 16 Jun 2026 22:58:41 +0000HIGH 7.5: SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879.https://patchthecve.com/cve/CVE-2008-4879.htmlhttps://patchthecve.com/cve/CVE-2008-4879.htmlTue, 16 Jun 2026 22:58:41 +0000HIGH 7.5: SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880.