https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-3721.htmlhttps://patchthecve.com/cve/CVE-2008-3721.htmlTue, 16 Jun 2026 22:56:23 +0000HIGH 7.5: PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter.https://patchthecve.com/cve/CVE-2008-3720.htmlhttps://patchthecve.com/cve/CVE-2008-3720.htmlTue, 16 Jun 2026 22:56:22 +0000HIGH 7.5: SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the id vector is already covered by CVE-2007-5679.https://patchthecve.com/cve/CVE-2007-5679.htmlhttps://patchthecve.com/cve/CVE-2007-5679.htmlTue, 16 Jun 2026 22:46:37 +0000HIGH 7.5: SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page (build_media_content.php). NOTE: it was later reported that 0.7.4 is also affected.