https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-7263.htmlhttps://patchthecve.com/cve/CVE-2014-7263.htmlWed, 17 Jun 2026 00:14:39 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP header, a different vulnerability than CVE-2014-7261.https://patchthecve.com/cve/CVE-2014-7262.htmlhttps://patchthecve.com/cve/CVE-2014-7262.htmlWed, 17 Jun 2026 00:14:39 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string.https://patchthecve.com/cve/CVE-2014-7261.htmlhttps://patchthecve.com/cve/CVE-2014-7261.htmlWed, 17 Jun 2026 00:14:39 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string that is improperly rendered during construction of a directory index page, a different vulnerability than CVE-2014-7263.https://patchthecve.com/cve/CVE-2014-7260.htmlhttps://patchthecve.com/cve/CVE-2014-7260.htmlWed, 17 Jun 2026 00:14:38 +0000HIGH 7.5: The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files containing commands in SSI directives.