PatchTheCVE: vegadnshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-1758: SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commhttps://patchthecve.com/cve/CVE-2006-1758.htmlhttps://patchthecve.com/cve/CVE-2006-1758.htmlTue, 16 Jun 2026 22:23:37 +0000HIGH 7.5: SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via the cid parameter.CVE-2006-1757: Cross-site scripting (XSS) vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrhttps://patchthecve.com/cve/CVE-2006-1757.htmlhttps://patchthecve.com/cve/CVE-2006-1757.htmlTue, 16 Jun 2026 22:23:37 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter.CVE-2005-2610: Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, alhttps://patchthecve.com/cve/CVE-2005-2610.htmlhttps://patchthecve.com/cve/CVE-2005-2610.htmlTue, 16 Jun 2026 22:15:17 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter.CVE-2005-2609: index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full serhttps://patchthecve.com/cve/CVE-2005-2609.htmlhttps://patchthecve.com/cve/CVE-2005-2609.htmlTue, 16 Jun 2026 22:15:17 +0000MEDIUM 5.0: index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNS_Sessid parameter.