https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-6367.htmlhttps://patchthecve.com/cve/CVE-2018-6367.htmlWed, 17 Jun 2026 02:01:44 +0000CRITICAL 9.8: SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_events.php category parameter.https://patchthecve.com/cve/CVE-2017-15991.htmlhttps://patchthecve.com/cve/CVE-2017-15991.htmlWed, 17 Jun 2026 01:08:36 +0000CRITICAL 9.8: Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and CVE-201https://patchthecve.com/cve/CVE-2017-15975.htmlhttps://patchthecve.com/cve/CVE-2017-15975.htmlWed, 17 Jun 2026 01:08:34 +0000CRITICAL 9.8: Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.