https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-6376.htmlhttps://patchthecve.com/cve/CVE-2006-6376.htmlTue, 16 Jun 2026 22:32:59 +0000HIGH 7.5: Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) delete arbitrary files via the delete parameter, and (3) modify arbitrary files via https://patchthecve.com/cve/CVE-2006-3160.htmlhttps://patchthecve.com/cve/CVE-2006-3160.htmlTue, 16 Jun 2026 22:26:31 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.https://patchthecve.com/cve/CVE-2003-1539.htmlhttps://patchthecve.com/cve/CVE-2003-1539.htmlTue, 16 Jun 2026 22:04:37 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.