https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-1452.htmlhttps://patchthecve.com/cve/CVE-2009-1452.htmlTue, 16 Jun 2026 23:07:18 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450.https://patchthecve.com/cve/CVE-2009-1451.htmlhttps://patchthecve.com/cve/CVE-2009-1451.htmlTue, 16 Jun 2026 23:07:18 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.https://patchthecve.com/cve/CVE-2009-1450.htmlhttps://patchthecve.com/cve/CVE-2009-1450.htmlTue, 16 Jun 2026 23:07:18 +0000HIGH 7.5: PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the _page_content parameter.