https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-7045.htmlhttps://patchthecve.com/cve/CVE-2006-7045.htmlTue, 16 Jun 2026 22:34:16 +0000HIGH 7.5: PHP remote file inclusion vulnerability in Clan Manager Pro (CMPRO) 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) rootpath and possibly (2) sitepath parameters to (a) cmpro.ext/comment.core.inc.php and (b) cmpro.intern/comment.core.inc.php. NOTE: the phttps://patchthecve.com/cve/CVE-2006-7044.htmlhttps://patchthecve.com/cve/CVE-2006-7044.htmlTue, 16 Jun 2026 22:34:16 +0000HIGH 7.5: PHP remote file inclusion vulnerability in comment.core.inc.php in Clan Manager Pro (CMPRO) 1.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.https://patchthecve.com/cve/CVE-2006-2921.htmlhttps://patchthecve.com/cve/CVE-2006-2921.htmlTue, 16 Jun 2026 22:26:02 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters.