https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-4397.htmlhttps://patchthecve.com/cve/CVE-2005-4397.htmlTue, 16 Jun 2026 22:18:43 +0000HIGH 7.5: SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter.https://patchthecve.com/cve/CVE-2005-4396.htmlhttps://patchthecve.com/cve/CVE-2005-4396.htmlTue, 16 Jun 2026 22:18:43 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in admin/Default.asp in iCMS allows remote attackers to inject arbitrary web script or HTML via the LoginMSG parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.https://patchthecve.com/cve/CVE-2005-3574.htmlhttps://patchthecve.com/cve/CVE-2005-3574.htmlTue, 16 Jun 2026 22:17:13 +0000MEDIUM 5.0: PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter.