https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-1356.htmlhttps://patchthecve.com/cve/CVE-2005-1356.htmlTue, 16 Jun 2026 22:12:54 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.https://patchthecve.com/cve/CVE-2005-1355.htmlhttps://patchthecve.com/cve/CVE-2005-1355.htmlTue, 16 Jun 2026 22:12:54 +0000MEDIUM 5.0: includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.https://patchthecve.com/cve/CVE-2005-0801.htmlhttps://patchthecve.com/cve/CVE-2005-0801.htmlTue, 16 Jun 2026 22:11:47 +0000MEDIUM 5.0: Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.