https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-2192.htmlhttps://patchthecve.com/cve/CVE-2004-2192.htmlTue, 16 Jun 2026 22:09:12 +0000HIGH 7.5: SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the ttt_admin parameter.https://patchthecve.com/cve/CVE-2004-2191.htmlhttps://patchthecve.com/cve/CVE-2004-2191.htmlTue, 16 Jun 2026 22:09:12 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) msg[0] or (2) siteurl parameters.https://patchthecve.com/cve/CVE-2004-2017.htmlhttps://patchthecve.com/cve/CVE-2004-2017.htmlTue, 16 Jun 2026 22:08:50 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header in a GET request to ttt-in, (3) the Referer header in a GET r