https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1990.htmlhttps://patchthecve.com/cve/CVE-2007-1990.htmlTue, 16 Jun 2026 22:38:42 +0000HIGH 7.5: PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are obtainehttps://patchthecve.com/cve/CVE-2007-1969.htmlhttps://patchthecve.com/cve/CVE-2007-1969.htmlTue, 16 Jun 2026 22:38:39 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter.https://patchthecve.com/cve/CVE-2007-1968.htmlhttps://patchthecve.com/cve/CVE-2007-1968.htmlTue, 16 Jun 2026 22:38:39 +0000MEDIUM 6.8: PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.