https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-5460.htmlhttps://patchthecve.com/cve/CVE-2006-5460.htmlTue, 16 Jun 2026 22:31:14 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter to (1) index.php, (2) certain other scripts in the top-level directory, and (3) certain scripts in the admin/ directory. https://patchthecve.com/cve/CVE-2006-5458.htmlhttps://patchthecve.com/cve/CVE-2006-5458.htmlTue, 16 Jun 2026 22:31:14 +0000HIGH 7.5: PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter.https://patchthecve.com/cve/CVE-2006-0655.htmlhttps://patchthecve.com/cve/CVE-2006-0655.htmlTue, 16 Jun 2026 22:21:01 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2006-0654.htmlhttps://patchthecve.com/cve/CVE-2006-0654.htmlTue, 16 Jun 2026 22:21:01 +0000HIGH 7.5: check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies.https://patchthecve.com/cve/CVE-2006-0653.htmlhttps://patchthecve.com/cve/CVE-2006-0653.htmlTue, 16 Jun 2026 22:21:01 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter.