https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2012-2405.htmlhttps://patchthecve.com/cve/CVE-2012-2405.htmlTue, 16 Jun 2026 23:41:30 +0000HIGH 10.0: Gallery 2 before 2.3.2 and 3 before 3.0.3 does not properly implement encryption, which has unspecified impact and attack vectors, a different vulnerability than CVE-2012-1113.https://patchthecve.com/cve/CVE-2012-1113.htmlhttps://patchthecve.com/cve/CVE-2012-1113.htmlTue, 16 Jun 2026 23:39:02 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem in Gallery 2 before 2.3.2 and 3 before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2008-3322.htmlhttps://patchthecve.com/cve/CVE-2008-3322.htmlTue, 16 Jun 2026 22:55:36 +0000HIGH 7.5: admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie.https://patchthecve.com/cve/CVE-2008-3320.htmlhttps://patchthecve.com/cve/CVE-2008-3320.htmlTue, 16 Jun 2026 22:55:36 +0000HIGH 7.5: admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbook_cookie cookie.https://patchthecve.com/cve/CVE-2008-3319.htmlhttps://patchthecve.com/cve/CVE-2008-3319.htmlTue, 16 Jun 2026 22:55:36 +0000HIGH 7.5: admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary links_cookie cookie.https://patchthecve.com/cve/CVE-2008-3318.htmlhttps://patchthecve.com/cve/CVE-2008-3318.htmlTue, 16 Jun 2026 22:55:36 +0000HIGH 7.5: admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblog_cookie cookie.https://patchthecve.com/cve/CVE-2007-2078.htmlhttps://patchthecve.com/cve/CVE-2007-2078.htmlTue, 16 Jun 2026 22:38:52 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, since the path_to_folder variable is initialized before usehttps://patchthecve.com/cve/CVE-2007-2077.htmlhttps://patchthecve.com/cve/CVE-2007-2077.htmlTue, 16 Jun 2026 22:38:52 +0000HIGH 7.5: PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this issue was fixed last year https://patchthecve.com/cve/CVE-2007-2076.htmlhttps://patchthecve.com/cve/CVE-2007-2076.htmlTue, 16 Jun 2026 22:38:52 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefhttps://patchthecve.com/cve/CVE-2006-1259.htmlhttps://patchthecve.com/cve/CVE-2006-1259.htmlTue, 16 Jun 2026 22:22:19 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass parameter to admin/index.php.