https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-1445.htmlhttps://patchthecve.com/cve/CVE-2009-1445.htmlTue, 16 Jun 2026 23:07:17 +0000HIGH 7.5: Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the https://patchthecve.com/cve/CVE-2009-1444.htmlhttps://patchthecve.com/cve/CVE-2009-1444.htmlTue, 16 Jun 2026 23:07:17 +0000HIGH 7.5: PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.https://patchthecve.com/cve/CVE-2008-4345.htmlhttps://patchthecve.com/cve/CVE-2008-4345.htmlTue, 16 Jun 2026 22:57:38 +0000HIGH 7.5: SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter.