https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-3676.htmlhttps://patchthecve.com/cve/CVE-2006-3676.htmlTue, 16 Jun 2026 22:27:32 +0000MEDIUM 5.1: admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types.https://patchthecve.com/cve/CVE-2006-3553.htmlhttps://patchthecve.com/cve/CVE-2006-3553.htmlTue, 16 Jun 2026 22:27:17 +0000HIGH 10.0: PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php.https://patchthecve.com/cve/CVE-2006-2338.htmlhttps://patchthecve.com/cve/CVE-2006-2338.htmlTue, 16 Jun 2026 22:24:48 +0000HIGH 7.5: PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the (1) admin.php or (2) settings.php page.https://patchthecve.com/cve/CVE-2006-2116.htmlhttps://patchthecve.com/cve/CVE-2006-2116.htmlTue, 16 Jun 2026 22:24:22 +0000HIGH 7.5: planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.https://patchthecve.com/cve/CVE-2006-1801.htmlhttps://patchthecve.com/cve/CVE-2006-1801.htmlTue, 16 Jun 2026 22:23:42 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbitrary web script or HTML via the search_exp parameter.