https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-1543.htmlhttps://patchthecve.com/cve/CVE-2004-1543.htmlTue, 16 Jun 2026 22:07:54 +0000MEDIUM 5.0: Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter.https://patchthecve.com/cve/CVE-2004-1427.htmlhttps://patchthecve.com/cve/CVE-2004-1427.htmlTue, 16 Jun 2026 22:07:40 +0000HIGH 7.5: PHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execute arbitrary PHP code by modifying the G_PATH parameter to reference a URL on a remote web server that contains the code, as demonstrated in index.php when using .. (dot dot) sequenhttps://patchthecve.com/cve/CVE-2004-1426.htmlhttps://patchthecve.com/cve/CVE-2004-1426.htmlTue, 16 Jun 2026 22:07:40 +0000MEDIUM 5.0: Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP files via .. (dot dot) sequences in the lng parameter.