https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1633.htmlhttps://patchthecve.com/cve/CVE-2007-1633.htmlTue, 16 Jun 2026 22:37:59 +0000HIGH 7.5: Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server loghttps://patchthecve.com/cve/CVE-2003-0590.htmlhttps://patchthecve.com/cve/CVE-2003-0590.htmlTue, 16 Jun 2026 22:02:28 +0000HIGH 7.1: Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.https://patchthecve.com/cve/CVE-2002-0959.htmlhttps://patchthecve.com/cve/CVE-2002-0959.htmlTue, 16 Jun 2026 21:58:27 +0000HIGH 7.5: Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.