https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2012-5916.htmlhttps://patchthecve.com/cve/CVE-2012-5916.htmlTue, 16 Jun 2026 23:47:34 +0000MEDIUM 5.0: Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/seditio-createnew-160.sql, (2) docs/upgrade/sedito_convert_to_utf8.optional.sql, or (3) system/install/install.parser.sql.https://patchthecve.com/cve/CVE-2012-5915.htmlhttps://patchthecve.com/cve/CVE-2012-5915.htmlTue, 16 Jun 2026 23:47:34 +0000MEDIUM 5.0: Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1) view.php, (2) plugins/contact/lang/contact.en.lang.php, (3) system/lang/en/main.lang.php, (4) system/lang/en/message.lang.php, or (5) system/core/view/view.inc.php, which reveals https://patchthecve.com/cve/CVE-2012-5914.htmlhttps://patchthecve.com/cve/CVE-2012-5914.htmlTue, 16 Jun 2026 23:47:34 +0000LOW 2.6: Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the (1) newmsg or (2) rtext parameter. NOTE: some of these details are obtained from third p