https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-7061.htmlhttps://patchthecve.com/cve/CVE-2006-7061.htmlTue, 16 Jun 2026 22:34:18 +0000HIGH 9.3: Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting (XSS) attacks.https://patchthecve.com/cve/CVE-2006-7060.htmlhttps://patchthecve.com/cve/CVE-2006-7060.htmlTue, 16 Jun 2026 22:34:18 +0000MEDIUM 5.0: cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message.https://patchthecve.com/cve/CVE-2006-7059.htmlhttps://patchthecve.com/cve/CVE-2006-7059.htmlTue, 16 Jun 2026 22:34:18 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net E-Dating System allow remote attackers to inject arbitrary web script or HTML via encoded entities (&#0000039) in IMG tags to (1) messages, (2) profile fields, or (3) the id parameter in a dologin operation to cindex.php.https://patchthecve.com/cve/CVE-2007-0952.htmlhttps://patchthecve.com/cve/CVE-2007-0952.htmlTue, 16 Jun 2026 22:36:37 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended range.