PatchTheCVE: grayscalehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-1434: SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackehttps://patchthecve.com/cve/CVE-2007-1434.htmlhttps://patchthecve.com/cve/CVE-2007-1434.htmlTue, 16 Jun 2026 22:37:34 +0000HIGH 7.5: SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) userdetail.php, id and (2) url parameter to (b) jump.php, and id variable to (c) detail.php.CVE-2007-1433: Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remotehttps://patchthecve.com/cve/CVE-2007-1433.htmlhttps://patchthecve.com/cve/CVE-2007-1433.htmlTue, 16 Jun 2026 22:37:34 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to (1) scripts/addblog_comment.php and (2) detail.php.CVE-2007-1432: Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct reqhttps://patchthecve.com/cve/CVE-2007-1432.htmlhttps://patchthecve.com/cve/CVE-2007-1432.htmlTue, 16 Jun 2026 22:37:34 +0000HIGH 7.5: Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter to add_users.php, and unspecified parameters to (2) addblog.php, (3) editblog.php, (4) editlinks.php, (5) edit_users.php, CVE-2006-4986: Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) cehttps://patchthecve.com/cve/CVE-2006-4986.htmlhttps://patchthecve.com/cve/CVE-2006-4986.htmlTue, 16 Jun 2026 22:30:15 +0000MEDIUM 5.0: Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_preview.php, and (3) adminpanel/configform.php; and files in adminpanel/includes/ including (4) mailinglist/disphtmltbl.php,CVE-2006-4985: Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to injecthttps://patchthecve.com/cve/CVE-2006-4985.htmlhttps://patchthecve.com/cve/CVE-2006-4985.htmlTue, 16 Jun 2026 22:30:15 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via (1) the max_file_size_purdy parameter in adminpanel/includes/helpfiles/help_mp3.php, (2) the message_text parameter in adminpanel/includes/mailinglist/sendeCVE-2006-4984: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to executehttps://patchthecve.com/cve/CVE-2006-4984.htmlhttps://patchthecve.com/cve/CVE-2006-4984.htmlTue, 16 Jun 2026 22:30:15 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter in (1) adminpanel/includes/mailinglist/mlist_xls.php and (2) adminpanel/includes/add_forms/addmp3.php. NOTE: the other vectCVE-2006-3193: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is ehttps://patchthecve.com/cve/CVE-2006-3193.htmlhttps://patchthecve.com/cve/CVE-2006-3193.htmlTue, 16 Jun 2026 22:26:34 +0000MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms