https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-7006.htmlhttps://patchthecve.com/cve/CVE-2006-7006.htmlTue, 16 Jun 2026 22:34:12 +0000HIGH 7.5: PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionalshttps://patchthecve.com/cve/CVE-2007-0704.htmlhttps://patchthecve.com/cve/CVE-2007-0704.htmlTue, 16 Jun 2026 22:36:06 +0000HIGH 7.5: PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation.https://patchthecve.com/cve/CVE-2006-4669.htmlhttps://patchthecve.com/cve/CVE-2006-4669.htmlTue, 16 Jun 2026 22:29:33 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter.