PatchTheCVE: rainbowfishsoftwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-29166: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result inhttps://patchthecve.com/cve/CVE-2020-29166.htmlhttps://patchthecve.com/cve/CVE-2020-29166.htmlWed, 17 Jun 2026 03:11:06 +0000HIGH 7.5: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.CVE-2020-29165: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result https://patchthecve.com/cve/CVE-2020-29165.htmlhttps://patchthecve.com/cve/CVE-2020-29165.htmlWed, 17 Jun 2026 03:11:06 +0000CRITICAL 9.8: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.CVE-2020-29164: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).https://patchthecve.com/cve/CVE-2020-29164.htmlhttps://patchthecve.com/cve/CVE-2020-29164.htmlWed, 17 Jun 2026 03:11:06 +0000MEDIUM 6.1: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).CVE-2020-29163: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.https://patchthecve.com/cve/CVE-2020-29163.htmlhttps://patchthecve.com/cve/CVE-2020-29163.htmlWed, 17 Jun 2026 03:11:06 +0000HIGH 8.8: PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.CVE-2020-12870: RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.https://patchthecve.com/cve/CVE-2020-12870.htmlhttps://patchthecve.com/cve/CVE-2020-12870.htmlWed, 17 Jun 2026 02:52:27 +0000CRITICAL 9.8: RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.CVE-2020-12869: RainbowFish PacsOne Server 6.8.4 allows XSS.https://patchthecve.com/cve/CVE-2020-12869.htmlhttps://patchthecve.com/cve/CVE-2020-12869.htmlWed, 17 Jun 2026 02:52:27 +0000MEDIUM 5.4: RainbowFish PacsOne Server 6.8.4 allows XSS.CVE-2020-12715: RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.https://patchthecve.com/cve/CVE-2020-12715.htmlhttps://patchthecve.com/cve/CVE-2020-12715.htmlWed, 17 Jun 2026 02:52:10 +0000HIGH 8.8: RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.