https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-2615.htmlhttps://patchthecve.com/cve/CVE-2006-2615.htmlTue, 16 Jun 2026 22:25:24 +0000HIGH 7.5: ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter.https://patchthecve.com/cve/CVE-2006-2588.htmlhttps://patchthecve.com/cve/CVE-2006-2588.htmlTue, 16 Jun 2026 22:25:22 +0000MEDIUM 5.0: Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension. NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability.https://patchthecve.com/cve/CVE-2006-2160.htmlhttps://patchthecve.com/cve/CVE-2006-2160.htmlTue, 16 Jun 2026 22:24:27 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) allows remote attackers to inject arbitrary web script or HTML via the username field when registering.https://patchthecve.com/cve/CVE-2006-2159.htmlhttps://patchthecve.com/cve/CVE-2006-2159.htmlTue, 16 Jun 2026 22:24:27 +0000MEDIUM 5.0: CRLF injection vulnerability in help.php in Russcom Network Loginphp allows remote attackers to spoof e-mails and inject MIME headers via CRLF sequences in the email address.