https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-0312.htmlhttps://patchthecve.com/cve/CVE-2006-0312.htmlTue, 16 Jun 2026 22:20:19 +0000MEDIUM 5.0: create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.https://patchthecve.com/cve/CVE-2006-0311.htmlhttps://patchthecve.com/cve/CVE-2006-0311.htmlTue, 16 Jun 2026 22:20:19 +0000HIGH 7.5: SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.https://patchthecve.com/cve/CVE-2006-0310.htmlhttps://patchthecve.com/cve/CVE-2006-0310.htmlTue, 16 Jun 2026 22:20:19 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag.