https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-7188.htmlhttps://patchthecve.com/cve/CVE-2008-7188.htmlTue, 16 Jun 2026 23:03:47 +0000HIGH 7.5: ClipShare 2.6 does not properly restrict access to certain functionality, which allows remote attackers to change the profile of arbitrary users via a modified uid variable to siteadmin/useredit.php. NOTE: this can be used to recover the password of the user by using the modified e-mail address in thttps://patchthecve.com/cve/CVE-2008-6173.htmlhttps://patchthecve.com/cve/CVE-2008-6173.htmlTue, 16 Jun 2026 23:01:45 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter.https://patchthecve.com/cve/CVE-2008-5489.htmlhttps://patchthecve.com/cve/CVE-2008-5489.htmlTue, 16 Jun 2026 23:00:06 +0000HIGH 7.5: SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter.