https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-4113.htmlhttps://patchthecve.com/cve/CVE-2007-4113.htmlTue, 16 Jun 2026 22:43:25 +0000LOW 3.5: Unspecified vulnerability in Advanced Webhost Billing System (AWBS) before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors.https://patchthecve.com/cve/CVE-2007-4112.htmlhttps://patchthecve.com/cve/CVE-2007-4112.htmlTue, 16 Jun 2026 22:43:25 +0000MEDIUM 6.8: Multiple SQL injection vulnerabilities in Advanced Webhost Billing System (AWBS) before 2.6.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be leveraged for XSS attacks that "bypass AWBS's anti-XSS input validatihttps://patchthecve.com/cve/CVE-2007-2272.htmlhttps://patchthecve.com/cve/CVE-2007-2272.htmlTue, 16 Jun 2026 22:39:16 +0000HIGH 7.5: PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter.