https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2865.htmlhttps://patchthecve.com/cve/CVE-2026-2865.htmlWed, 17 Jun 2026 10:31:54 +0000HIGH 7.3: A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be initiahttps://patchthecve.com/cve/CVE-2025-7193.htmlhttps://patchthecve.com/cve/CVE-2025-7193.htmlWed, 17 Jun 2026 10:04:28 +0000HIGH 7.3: A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the attachttps://patchthecve.com/cve/CVE-2025-6489.htmlhttps://patchthecve.com/cve/CVE-2025-6489.htmlWed, 17 Jun 2026 10:02:00 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Agri-Trading Online Shopping System 1.0 and classified as critical. This vulnerability affects unknown code of the file /transactionsave.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2024-50968.htmlhttps://patchthecve.com/cve/CVE-2024-50968.htmlWed, 17 Jun 2026 08:05:11 +0000HIGH 7.5: A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the app