https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-4978.htmlhttps://patchthecve.com/cve/CVE-2009-4978.htmlTue, 16 Jun 2026 23:14:45 +0000MEDIUM 5.0: Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.https://patchthecve.com/cve/CVE-2009-4977.htmlhttps://patchthecve.com/cve/CVE-2009-4977.htmlTue, 16 Jun 2026 23:14:45 +0000MEDIUM 6.5: PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a URL in the main_content parameter.https://patchthecve.com/cve/CVE-2010-1872.htmlhttps://patchthecve.com/cve/CVE-2010-1872.htmlTue, 16 Jun 2026 23:19:30 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information.https://patchthecve.com/cve/CVE-2010-1055.htmlhttps://patchthecve.com/cve/CVE-2010-1055.htmlTue, 16 Jun 2026 23:17:25 +0000MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the config[forum_installed] parameter to (1) forum/adminLogin.php and (2) forum/userLoginhttps://patchthecve.com/cve/CVE-2008-6799.htmlhttps://patchthecve.com/cve/CVE-2008-6799.htmlTue, 16 Jun 2026 23:02:59 +0000HIGH 7.5: connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."https://patchthecve.com/cve/CVE-2008-4738.htmlhttps://patchthecve.com/cve/CVE-2008-4738.htmlTue, 16 Jun 2026 22:58:25 +0000HIGH 7.5: SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.https://patchthecve.com/cve/CVE-2007-3697.htmlhttps://patchthecve.com/cve/CVE-2007-3697.htmlTue, 16 Jun 2026 22:42:32 +0000HIGH 7.5: PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter.https://patchthecve.com/cve/CVE-2006-7032.htmlhttps://patchthecve.com/cve/CVE-2006-7032.htmlTue, 16 Jun 2026 22:34:15 +0000HIGH 10.0: PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter.