https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6978.htmlhttps://patchthecve.com/cve/CVE-2008-6978.htmlTue, 16 Jun 2026 23:03:21 +0000MEDIUM 6.8: Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp.https://patchthecve.com/cve/CVE-2008-6977.htmlhttps://patchthecve.com/cve/CVE-2008-6977.htmlTue, 16 Jun 2026 23:03:21 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action.https://patchthecve.com/cve/CVE-2009-1223.htmlhttps://patchthecve.com/cve/CVE-2009-1223.htmlTue, 16 Jun 2026 23:06:48 +0000MEDIUM 5.0: aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.