https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2433.htmlhttps://patchthecve.com/cve/CVE-2007-2433.htmlTue, 16 Jun 2026 22:39:34 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2006-5776.htmlhttps://patchthecve.com/cve/CVE-2006-5776.htmlTue, 16 Jun 2026 22:31:51 +0000HIGH 7.5: Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outhttps://patchthecve.com/cve/CVE-2005-1181.htmlhttps://patchthecve.com/cve/CVE-2005-1181.htmlTue, 16 Jun 2026 22:12:36 +0000HIGH 7.5: NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor ha