https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-4885.htmlhttps://patchthecve.com/cve/CVE-2006-4885.htmlTue, 16 Jun 2026 22:29:58 +0000HIGH 7.5: PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party infhttps://patchthecve.com/cve/CVE-2006-4826.htmlhttps://patchthecve.com/cve/CVE-2006-4826.htmlTue, 16 Jun 2026 22:29:51 +0000HIGH 7.5: PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.https://patchthecve.com/cve/CVE-2006-1701.htmlhttps://patchthecve.com/cve/CVE-2006-1701.htmlTue, 16 Jun 2026 22:23:28 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.