https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-2754.htmlhttps://patchthecve.com/cve/CVE-2008-2754.htmlTue, 16 Jun 2026 22:54:23 +0000MEDIUM 6.8: SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter.https://patchthecve.com/cve/CVE-2007-1118.htmlhttps://patchthecve.com/cve/CVE-2007-1118.htmlTue, 16 Jun 2026 22:36:59 +0000MEDIUM 6.8: Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path_to_smf parameter to (1) bridges/SMF/logout.php or (2) get_session_vars.php.https://patchthecve.com/cve/CVE-2006-4427.htmlhttps://patchthecve.com/cve/CVE-2006-4427.htmlTue, 16 Jun 2026 22:29:04 +0000MEDIUM 5.1: index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin, (2) loggedin, and (3) level parameters to "1".