PatchTheCVE: john anderssonhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-4612: SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL https://patchthecve.com/cve/CVE-2006-4612.htmlhttps://patchthecve.com/cve/CVE-2006-4612.htmlTue, 16 Jun 2026 22:29:27 +0000HIGH 7.5: SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter.CVE-2006-2541: SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL https://patchthecve.com/cve/CVE-2006-2541.htmlhttps://patchthecve.com/cve/CVE-2006-2541.htmlTue, 16 Jun 2026 22:25:17 +0000HIGH 7.5: SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to (1) login.asp and (2) main.asp.CVE-2005-4334: SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via thehttps://patchthecve.com/cve/CVE-2005-4334.htmlhttps://patchthecve.com/cve/CVE-2005-4334.htmlTue, 16 Jun 2026 22:18:36 +0000HIGH 7.5: SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.asp.