https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6650.htmlhttps://patchthecve.com/cve/CVE-2008-6650.htmlTue, 16 Jun 2026 23:02:41 +0000MEDIUM 5.0: del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a different vulnerability than CVE-2008-4628.https://patchthecve.com/cve/CVE-2008-5004.htmlhttps://patchthecve.com/cve/CVE-2008-5004.htmlTue, 16 Jun 2026 22:58:55 +0000HIGH 7.5: SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted cookie.https://patchthecve.com/cve/CVE-2008-4650.htmlhttps://patchthecve.com/cve/CVE-2008-4650.htmlTue, 16 Jun 2026 22:58:14 +0000HIGH 7.5: SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter.https://patchthecve.com/cve/CVE-2008-4644.htmlhttps://patchthecve.com/cve/CVE-2008-4644.htmlTue, 16 Jun 2026 22:58:13 +0000HIGH 7.5: hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.https://patchthecve.com/cve/CVE-2008-4643.htmlhttps://patchthecve.com/cve/CVE-2008-4643.htmlTue, 16 Jun 2026 22:58:13 +0000HIGH 7.5: SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter.https://patchthecve.com/cve/CVE-2008-4628.htmlhttps://patchthecve.com/cve/CVE-2008-4628.htmlTue, 16 Jun 2026 22:58:12 +0000HIGH 7.5: SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.