https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-6721.htmlhttps://patchthecve.com/cve/CVE-2006-6721.htmlTue, 16 Jun 2026 22:33:39 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter.https://patchthecve.com/cve/CVE-2006-4008.htmlhttps://patchthecve.com/cve/CVE-2006-4008.htmlTue, 16 Jun 2026 22:28:15 +0000HIGH 7.5: PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the faq_path parameter.https://patchthecve.com/cve/CVE-2006-4007.htmlhttps://patchthecve.com/cve/CVE-2006-4007.htmlTue, 16 Jun 2026 22:28:14 +0000HIGH 7.5: PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GB_PATH parameter.https://patchthecve.com/cve/CVE-2006-3989.htmlhttps://patchthecve.com/cve/CVE-2006-3989.htmlTue, 16 Jun 2026 22:28:12 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter.https://patchthecve.com/cve/CVE-2006-3988.htmlhttps://patchthecve.com/cve/CVE-2006-3988.htmlTue, 16 Jun 2026 22:28:12 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the news_include_path parameter.https://patchthecve.com/cve/CVE-2006-3987.htmlhttps://patchthecve.com/cve/CVE-2006-3987.htmlTue, 16 Jun 2026 22:28:12 +0000MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) dwl_download_path or (2) dwl_include_path parameters.https://patchthecve.com/cve/CVE-2006-3986.htmlhttps://patchthecve.com/cve/CVE-2006-3986.htmlTue, 16 Jun 2026 22:28:12 +0000HIGH 7.5: PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NL_PATH parameter.https://patchthecve.com/cve/CVE-2006-3982.htmlhttps://patchthecve.com/cve/CVE-2006-3982.htmlTue, 16 Jun 2026 22:28:11 +0000HIGH 7.5: PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICK_PATH parameter.https://patchthecve.com/cve/CVE-2005-1220.htmlhttps://patchthecve.com/cve/CVE-2005-1220.htmlTue, 16 Jun 2026 22:12:40 +0000HIGH 7.5: Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.