https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-5820.htmlhttps://patchthecve.com/cve/CVE-2008-5820.htmlTue, 16 Jun 2026 23:01:03 +0000HIGH 7.5: SQL injection vulnerability in eDNews_view.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter.https://patchthecve.com/cve/CVE-2008-5819.htmlhttps://patchthecve.com/cve/CVE-2008-5819.htmlTue, 16 Jun 2026 23:01:03 +0000MEDIUM 6.8: Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter. NOTE: some of these details are obtained from third party information.https://patchthecve.com/cve/CVE-2008-5818.htmlhttps://patchthecve.com/cve/CVE-2008-5818.htmlTue, 16 Jun 2026 23:01:03 +0000MEDIUM 6.8: Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lg parameter. NOTE: some of these details are obtained from third party information.