https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1597.htmlhttps://patchthecve.com/cve/CVE-2007-1597.htmlTue, 16 Jun 2026 22:37:55 +0000MEDIUM 5.0: Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain (1) the board log via a direct request for logs/board-YYYY-MM-DD.log, (2) the mail and private message (PM) log via a direct request for logs/email-Yhttps://patchthecve.com/cve/CVE-2006-2406.htmlhttps://patchthecve.com/cve/CVE-2006-2406.htmlTue, 16 Jun 2026 22:24:56 +0000LOW 2.6: Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter.https://patchthecve.com/cve/CVE-2006-2405.htmlhttps://patchthecve.com/cve/CVE-2006-2405.htmlTue, 16 Jun 2026 22:24:56 +0000MEDIUM 6.8: Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the ABBC[Config][smileset] parameterhttps://patchthecve.com/cve/CVE-2005-2855.htmlhttps://patchthecve.com/cve/CVE-2005-2855.htmlTue, 16 Jun 2026 22:15:47 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Unclassified NewsBoard 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the description field.