https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-4890.htmlhttps://patchthecve.com/cve/CVE-2009-4890.htmlTue, 16 Jun 2026 23:14:33 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the (1) title and (2) message parameters.https://patchthecve.com/cve/CVE-2006-1563.htmlhttps://patchthecve.com/cve/CVE-2006-1563.htmlTue, 16 Jun 2026 22:23:12 +0000HIGH 7.6: Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts.https://patchthecve.com/cve/CVE-2006-1562.htmlhttps://patchthecve.com/cve/CVE-2006-1562.htmlTue, 16 Jun 2026 22:23:12 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters.https://patchthecve.com/cve/CVE-2006-1561.htmlhttps://patchthecve.com/cve/CVE-2006-1561.htmlTue, 16 Jun 2026 22:23:12 +0000MEDIUM 5.1: SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter.