https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-0434.htmlhttps://patchthecve.com/cve/CVE-2006-0434.htmlTue, 16 Jun 2026 22:20:35 +0000MEDIUM 5.0: Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244. NOTE: if the functionality of phpXplorer supports the upload of PHP fileshttps://patchthecve.com/cve/CVE-2006-0244.htmlhttps://patchthecve.com/cve/CVE-2006-0244.htmlTue, 16 Jun 2026 22:20:10 +0000MEDIUM 5.0: Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer suhttps://patchthecve.com/cve/CVE-2005-4301.htmlhttps://patchthecve.com/cve/CVE-2005-4301.htmlTue, 16 Jun 2026 22:18:32 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field.