https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-7034.htmlhttps://patchthecve.com/cve/CVE-2008-7034.htmlTue, 16 Jun 2026 23:03:27 +0000HIGH 7.5: PHP remote file inclusion vulnerability in kernel/smarty/Smarty.class.php in PHPEcho CMS 2.0 rc3 allows remote attackers to execute arbitrary PHP code via a URL in unspecified vectors that modify the _smarty_compile_path variable in the fetch function.https://patchthecve.com/cve/CVE-2009-2402.htmlhttps://patchthecve.com/cve/CVE-2009-2402.htmlTue, 16 Jun 2026 23:09:22 +0000HIGH 7.5: SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355.https://patchthecve.com/cve/CVE-2009-2401.htmlhttps://patchthecve.com/cve/CVE-2009-2401.htmlTue, 16 Jun 2026 23:09:21 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post.