https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6871.htmlhttps://patchthecve.com/cve/CVE-2008-6871.htmlTue, 16 Jun 2026 23:03:08 +0000MEDIUM 5.0: Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified sensitive information via a direct request.https://patchthecve.com/cve/CVE-2008-6870.htmlhttps://patchthecve.com/cve/CVE-2008-6870.htmlTue, 16 Jun 2026 23:03:08 +0000MEDIUM 5.0: Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request to (1) config.asp and (2) users.asp.https://patchthecve.com/cve/CVE-2008-5600.htmlhttps://patchthecve.com/cve/CVE-2008-5600.htmlTue, 16 Jun 2026 23:00:39 +0000MEDIUM 5.0: Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb.https://patchthecve.com/cve/CVE-2008-5599.htmlhttps://patchthecve.com/cve/CVE-2008-5599.htmlTue, 16 Jun 2026 23:00:38 +0000HIGH 7.5: SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter (aka passwd field) in a login action. NOTE: some of these details are obtained from third party information.