https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-1482.htmlhttps://patchthecve.com/cve/CVE-2002-1482.htmlTue, 16 Jun 2026 21:59:24 +0000HIGH 10.0: SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.https://patchthecve.com/cve/CVE-2002-1481.htmlhttps://patchthecve.com/cve/CVE-2002-1481.htmlTue, 16 Jun 2026 21:59:24 +0000HIGH 7.5: savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php.https://patchthecve.com/cve/CVE-2002-1480.htmlhttps://patchthecve.com/cve/CVE-2002-1480.htmlTue, 16 Jun 2026 21:59:24 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry.