https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-7058.htmlhttps://patchthecve.com/cve/CVE-2008-7058.htmlTue, 16 Jun 2026 23:03:30 +0000MEDIUM 6.8: Cross-site request forgery (CSRF) vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php.https://patchthecve.com/cve/CVE-2008-7057.htmlhttps://patchthecve.com/cve/CVE-2008-7057.htmlTue, 16 Jun 2026 23:03:30 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in merchandise.php in BandSite CMS 1.1.4 allows remote attackers to inject arbitrary HTML or web script via the type parameter.https://patchthecve.com/cve/CVE-2008-7056.htmlhttps://patchthecve.com/cve/CVE-2008-7056.htmlTue, 16 Jun 2026 23:03:30 +0000MEDIUM 5.0: BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request.