PatchTheCVE: dotnetindexhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2008-5596: Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access controhttps://patchthecve.com/cve/CVE-2008-5596.htmlhttps://patchthecve.com/cve/CVE-2008-5596.htmlTue, 16 Jun 2026 23:00:38 +0000MEDIUM 5.0: Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for ikonBAnner_AdManager.mdb.CVE-2008-5572: Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access chttps://patchthecve.com/cve/CVE-2008-5572.htmlhttps://patchthecve.com/cve/CVE-2008-5572.htmlTue, 16 Jun 2026 23:00:35 +0000MEDIUM 5.0: Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb.CVE-2008-5571: SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers https://patchthecve.com/cve/CVE-2008-5571.htmlhttps://patchthecve.com/cve/CVE-2008-5571.htmlTue, 16 Jun 2026 23:00:35 +0000HIGH 7.5: SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) uname parameter (aka user field) or the (2) psw parameter (aka passwd field). NOTE: some of these details are obtained from third party informa