https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-0828.htmlhttps://patchthecve.com/cve/CVE-2009-0828.htmlTue, 16 Jun 2026 23:05:53 +0000MEDIUM 5.0: QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request.https://patchthecve.com/cve/CVE-2009-0827.htmlhttps://patchthecve.com/cve/CVE-2009-0827.htmlTue, 16 Jun 2026 23:05:53 +0000MEDIUM 5.0: PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request.https://patchthecve.com/cve/CVE-2009-0826.htmlhttps://patchthecve.com/cve/CVE-2009-0826.htmlTue, 16 Jun 2026 23:05:53 +0000MEDIUM 5.0: BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request.