https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3786.htmlhttps://patchthecve.com/cve/CVE-2026-3786.htmlWed, 17 Jun 2026 10:44:13 +0000MEDIUM 6.3: A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /RbacuserAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order results in sql injection. The attack can be launched remotely. The exploit hhttps://patchthecve.com/cve/CVE-2026-3785.htmlhttps://patchthecve.com/cve/CVE-2026-3785.htmlWed, 17 Jun 2026 10:44:13 +0000MEDIUM 6.3: A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAction.class.php of the component Request Parameter Handler. The manipulation of the argument _order leads to sql injection. The attack can be initiated remotely. The exploit is publhttps://patchthecve.com/cve/CVE-2026-1105.htmlhttps://patchthecve.com/cve/CVE-2026-1105.htmlWed, 17 Jun 2026 10:15:00 +0000HIGH 7.3: A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of the argument _order leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was co