https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-2848.htmlhttps://patchthecve.com/cve/CVE-2006-2848.htmlTue, 16 Jun 2026 22:25:54 +0000MEDIUM 5.0: links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePassword field.https://patchthecve.com/cve/CVE-2006-2847.htmlhttps://patchthecve.com/cve/CVE-2006-2847.htmlTue, 16 Jun 2026 22:25:54 +0000HIGH 7.5: SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID parameter.https://patchthecve.com/cve/CVE-2004-1552.htmlhttps://patchthecve.com/cve/CVE-2004-1552.htmlTue, 16 Jun 2026 22:07:55 +0000HIGH 7.5: SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.