https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-7076.htmlhttps://patchthecve.com/cve/CVE-2008-7076.htmlTue, 16 Jun 2026 23:03:33 +0000MEDIUM 6.5: Unrestricted file upload vulnerability in user.modify.profile.php in Kalptaru Infotech Ltd. Star Articles 6.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile photo, then accessing it via a direct request to the file in authorphttps://patchthecve.com/cve/CVE-2008-7075.htmlhttps://patchthecve.com/cve/CVE-2008-7075.htmlTue, 16 Jun 2026 23:03:32 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via (1) the subcatid parameter to article.list.php; or the artid parameter to (2) article.print.php, (3) article.comments.php, (4) article.publisher.php, or (5) https://patchthecve.com/cve/CVE-2008-5590.htmlhttps://patchthecve.com/cve/CVE-2008-5590.htmlTue, 16 Jun 2026 23:00:37 +0000HIGH 7.5: SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forum_topic_id parameter.