https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-5879.htmlhttps://patchthecve.com/cve/CVE-2008-5879.htmlTue, 16 Jun 2026 23:01:09 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors.https://patchthecve.com/cve/CVE-2008-5878.htmlhttps://patchthecve.com/cve/CVE-2008-5878.htmlTue, 16 Jun 2026 23:01:09 +0000MEDIUM 5.1: Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary files via a .. (dot dot) in the (1) boxname parameter to theme/superchromhttps://patchthecve.com/cve/CVE-2008-5877.htmlhttps://patchthecve.com/cve/CVE-2008-5877.htmlTue, 16 Jun 2026 23:01:08 +0000MEDIUM 6.8: Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) form_id parameter to pcw/processforms.php, (3) pcwlogin and (4) p