https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2021.htmlhttps://patchthecve.com/cve/CVE-2007-2021.htmlTue, 16 Jun 2026 22:38:45 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_path parameter to third_party/phpmailer/class.phpmailer.php or the (2) get_plugin_file_path parameter to third_party/smarty/libs/plugins/https://patchthecve.com/cve/CVE-2007-1905.htmlhttps://patchthecve.com/cve/CVE-2007-1905.htmlTue, 16 Jun 2026 22:38:32 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forward_to parameter, as demonstrated using "<"<".https://patchthecve.com/cve/CVE-2006-2836.htmlhttps://patchthecve.com/cve/CVE-2006-2836.htmlTue, 16 Jun 2026 22:25:52 +0000HIGH 7.5: SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.https://patchthecve.com/cve/CVE-2005-3988.htmlhttps://patchthecve.com/cve/CVE-2005-3988.htmlTue, 16 Jun 2026 22:18:01 +0000HIGH 7.5: SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.