https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-5178.htmlhttps://patchthecve.com/cve/CVE-2007-5178.htmlTue, 16 Jun 2026 22:45:35 +0000MEDIUM 6.8: contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter. https://patchthecve.com/cve/CVE-2007-2493.htmlhttps://patchthecve.com/cve/CVE-2007-2493.htmlTue, 16 Jun 2026 22:39:42 +0000HIGH 10.0: PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2007-2313.htmlhttps://patchthecve.com/cve/CVE-2007-2313.htmlTue, 16 Jun 2026 22:39:20 +0000HIGH 7.5: PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.https://patchthecve.com/cve/CVE-2006-6650.htmlhttps://patchthecve.com/cve/CVE-2006-6650.htmlTue, 16 Jun 2026 22:33:32 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6645.htmlhttps://patchthecve.com/cve/CVE-2006-6645.htmlTue, 16 Jun 2026 22:33:31 +0000HIGH 7.5: PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.https://patchthecve.com/cve/CVE-2006-6644.htmlhttps://patchthecve.com/cve/CVE-2006-6644.htmlTue, 16 Jun 2026 22:33:31 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6615.htmlhttps://patchthecve.com/cve/CVE-2006-6615.htmlTue, 16 Jun 2026 22:33:28 +0000HIGH 7.5: PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6568.htmlhttps://patchthecve.com/cve/CVE-2006-6568.htmlTue, 16 Jun 2026 22:33:23 +0000HIGH 10.0: Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the phpEx parameter.https://patchthecve.com/cve/CVE-2006-6567.htmlhttps://patchthecve.com/cve/CVE-2006-6567.htmlTue, 16 Jun 2026 22:33:23 +0000HIGH 10.0: PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6566.htmlhttps://patchthecve.com/cve/CVE-2006-6566.htmlTue, 16 Jun 2026 22:33:23 +0000HIGH 7.5: PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6560.htmlhttps://patchthecve.com/cve/CVE-2006-6560.htmlTue, 16 Jun 2026 22:33:22 +0000HIGH 7.5: PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6553.htmlhttps://patchthecve.com/cve/CVE-2006-6553.htmlTue, 16 Jun 2026 22:33:21 +0000HIGH 7.5: PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.https://patchthecve.com/cve/CVE-2006-6295.htmlhttps://patchthecve.com/cve/CVE-2006-6295.htmlTue, 16 Jun 2026 22:32:51 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-6065.htmlhttps://patchthecve.com/cve/CVE-2006-6065.htmlTue, 16 Jun 2026 22:32:23 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-5803.htmlhttps://patchthecve.com/cve/CVE-2006-5803.htmlTue, 16 Jun 2026 22:31:54 +0000HIGH 7.5: PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.https://patchthecve.com/cve/CVE-2006-2361.htmlhttps://patchthecve.com/cve/CVE-2006-2361.htmlTue, 16 Jun 2026 22:24:51 +0000HIGH 7.5: PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.