https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-4012.htmlhttps://patchthecve.com/cve/CVE-2006-4012.htmlTue, 16 Jun 2026 22:28:15 +0000MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITE_Path parameter to (1) poll/poll.php or (2) poll/view_polls.php. NOTE: the menu_dx.php vector is already covered by CVE-2005-2687.https://patchthecve.com/cve/CVE-2005-2688.htmlhttps://patchthecve.com/cve/CVE-2005-2688.htmlTue, 16 Jun 2026 22:15:28 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) https://patchthecve.com/cve/CVE-2005-2687.htmlhttps://patchthecve.com/cve/CVE-2005-2687.htmlTue, 16 Jun 2026 22:15:28 +0000HIGH 7.5: PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.https://patchthecve.com/cve/CVE-2005-2686.htmlhttps://patchthecve.com/cve/CVE-2005-2686.htmlTue, 16 Jun 2026 22:15:28 +0000HIGH 7.5: Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.https://patchthecve.com/cve/CVE-2005-2685.htmlhttps://patchthecve.com/cve/CVE-2005-2685.htmlTue, 16 Jun 2026 22:15:28 +0000HIGH 7.5: SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability stems