https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-4870.htmlhttps://patchthecve.com/cve/CVE-2006-4870.htmlTue, 16 Jun 2026 22:29:56 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.https://patchthecve.com/cve/CVE-2006-3279.htmlhttps://patchthecve.com/cve/CVE-2006-3279.htmlTue, 16 Jun 2026 22:26:45 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email parameter in forgot.php.https://patchthecve.com/cve/CVE-2005-2985.htmlhttps://patchthecve.com/cve/CVE-2005-2985.htmlTue, 16 Jun 2026 22:16:02 +0000HIGH 7.5: SQL injection vulnerability in search_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter.https://patchthecve.com/cve/CVE-2005-1084.htmlhttps://patchthecve.com/cve/CVE-2005-1084.htmlTue, 16 Jun 2026 22:12:24 +0000HIGH 7.5: SQL injection vulnerability in sdating.php in aeDating 3.2 allows remote attackers to execute arbitrary SQL commands files via the event parameter.https://patchthecve.com/cve/CVE-2005-1083.htmlhttps://patchthecve.com/cve/CVE-2005-1083.htmlTue, 16 Jun 2026 22:12:24 +0000MEDIUM 5.0: index.php in aeDating 3.2 allows remote attackers to include arbitrary files via the skin parameter.