https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-1486.htmlhttps://patchthecve.com/cve/CVE-2009-1486.htmlTue, 16 Jun 2026 23:07:22 +0000HIGH 7.5: Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the with parameter.https://patchthecve.com/cve/CVE-2009-0571.htmlhttps://patchthecve.com/cve/CVE-2009-0571.htmlTue, 16 Jun 2026 23:05:19 +0000MEDIUM 5.0: admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory.https://patchthecve.com/cve/CVE-2009-0570.htmlhttps://patchthecve.com/cve/CVE-2009-0570.htmlTue, 16 Jun 2026 23:05:19 +0000MEDIUM 5.1: Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the load parameter. NOTE: some of these details are obtained fromhttps://patchthecve.com/cve/CVE-2009-0325.htmlhttps://patchthecve.com/cve/CVE-2009-0325.htmlTue, 16 Jun 2026 23:04:47 +0000MEDIUM 4.3: Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.