https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-6360.htmlhttps://patchthecve.com/cve/CVE-2006-6360.htmlTue, 16 Jun 2026 22:32:57 +0000HIGH 7.5: PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the footerpage parameter.https://patchthecve.com/cve/CVE-2006-1208.htmlhttps://patchthecve.com/cve/CVE-2006-1208.htmlTue, 16 Jun 2026 22:22:13 +0000HIGH 7.5: Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory.https://patchthecve.com/cve/CVE-2006-1207.htmlhttps://patchthecve.com/cve/CVE-2006-1207.htmlTue, 16 Jun 2026 22:22:13 +0000MEDIUM 5.0: PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file.