https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-0340.htmlhttps://patchthecve.com/cve/CVE-2007-0340.htmlTue, 16 Jun 2026 22:35:23 +0000HIGH 7.5: SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execute arbitrary SQL commands via the board[styleid] parameter to index.php.https://patchthecve.com/cve/CVE-2006-2037.htmlhttps://patchthecve.com/cve/CVE-2006-2037.htmlTue, 16 Jun 2026 22:24:13 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the navpath parameter.https://patchthecve.com/cve/CVE-2005-4139.htmlhttps://patchthecve.com/cve/CVE-2005-4139.htmlTue, 16 Jun 2026 22:18:14 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc.php.https://patchthecve.com/cve/CVE-2004-1779.htmlhttps://patchthecve.com/cve/CVE-2004-1779.htmlTue, 16 Jun 2026 22:08:23 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.https://patchthecve.com/cve/CVE-2003-1185.htmlhttps://patchthecve.com/cve/CVE-2003-1185.htmlTue, 16 Jun 2026 22:03:40 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including (1) Admin-Center, (2) Announcements, (3) admin/calendar.php, and (4) showevent.php.