https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-1077.htmlhttps://patchthecve.com/cve/CVE-2008-1077.htmlTue, 16 Jun 2026 22:50:56 +0000HIGH 7.5: SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a view action.https://patchthecve.com/cve/CVE-2006-3528.htmlhttps://patchthecve.com/cve/CVE-2006-3528.htmlTue, 16 Jun 2026 22:27:14 +0000MEDIUM 6.8: Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) image_upload.php and (2) file_upload.php.https://patchthecve.com/cve/CVE-2006-2815.htmlhttps://patchthecve.com/cve/CVE-2006-2815.htmlTue, 16 Jun 2026 22:25:50 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard), as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in "post ne topic" in the Frontend, (2) the Title (aka