https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-4767.htmlhttps://patchthecve.com/cve/CVE-2009-4767.htmlTue, 16 Jun 2026 23:14:19 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text parameters. NOTE: some of these details are obtained from third party information.https://patchthecve.com/cve/CVE-2007-6298.htmlhttps://patchthecve.com/cve/CVE-2007-6298.htmlTue, 16 Jun 2026 22:47:46 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages.https://patchthecve.com/cve/CVE-2007-4330.htmlhttps://patchthecve.com/cve/CVE-2007-4330.htmlTue, 16 Jun 2026 22:43:49 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.https://patchthecve.com/cve/CVE-2007-0546.htmlhttps://patchthecve.com/cve/CVE-2007-0546.htmlTue, 16 Jun 2026 22:35:47 +0000HIGH 7.8: Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb.https://patchthecve.com/cve/CVE-2006-6721.htmlhttps://patchthecve.com/cve/CVE-2006-6721.htmlTue, 16 Jun 2026 22:33:39 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter.https://patchthecve.com/cve/CVE-2006-3989.htmlhttps://patchthecve.com/cve/CVE-2006-3989.htmlTue, 16 Jun 2026 22:28:12 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter.https://patchthecve.com/cve/CVE-2006-0606.htmlhttps://patchthecve.com/cve/CVE-2006-0606.htmlTue, 16 Jun 2026 22:20:55 +0000HIGH 7.5: SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.https://patchthecve.com/cve/CVE-2006-0605.htmlhttps://patchthecve.com/cve/CVE-2006-0605.htmlTue, 16 Jun 2026 22:20:55 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the (1) Handle or (2) Message fields.https://patchthecve.com/cve/CVE-2002-1429.htmlhttps://patchthecve.com/cve/CVE-2002-1429.htmlTue, 16 Jun 2026 21:59:18 +0000MEDIUM 5.0: Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter.