https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9690.htmlhttps://patchthecve.com/cve/CVE-2025-9690.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 6.3: A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9689.htmlhttps://patchthecve.com/cve/CVE-2025-9689.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 6.3: A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now puhttps://patchthecve.com/cve/CVE-2025-9306.htmlhttps://patchthecve.com/cve/CVE-2025-9306.htmlWed, 17 Jun 2026 10:08:43 +0000LOW 3.5: A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely. The