https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-2599.htmlhttps://patchthecve.com/cve/CVE-2024-2599.htmlWed, 17 Jun 2026 07:24:51 +0000CRITICAL 9.9: File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure.https://patchthecve.com/cve/CVE-2024-2598.htmlhttps://patchthecve.com/cve/CVE-2024-2598.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 7.1: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/select_send_2.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially https://patchthecve.com/cve/CVE-2024-2597.htmlhttps://patchthecve.com/cve/CVE-2024-2597.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 7.1: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_school_person.php, in the 'b_id' parameter. This vulnerability could allow a remote attacker to send https://patchthecve.com/cve/CVE-2024-2596.htmlhttps://patchthecve.com/cve/CVE-2024-2596.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 7.1: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/mail/main/select_send.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crhttps://patchthecve.com/cve/CVE-2024-2595.htmlhttps://patchthecve.com/cve/CVE-2024-2595.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 7.1: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_khet_person.php, in the 'b_id' parameter. This vulnerability could allow a remote attacker to send a https://patchthecve.com/cve/CVE-2024-2594.htmlhttps://patchthecve.com/cve/CVE-2024-2594.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 7.1: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/admin/index.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an auhttps://patchthecve.com/cve/CVE-2024-2593.htmlhttps://patchthecve.com/cve/CVE-2024-2593.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 7.1: Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_group.php, in the 'b_id' parameter. This vulnerability could allow a remote attacker to send a speciahttps://patchthecve.com/cve/CVE-2024-2592.htmlhttps://patchthecve.com/cve/CVE-2024-2592.htmlWed, 17 Jun 2026 07:24:51 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-2591.htmlhttps://patchthecve.com/cve/CVE-2024-2591.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-2590.htmlhttps://patchthecve.com/cve/CVE-2024-2590.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-2589.htmlhttps://patchthecve.com/cve/CVE-2024-2589.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in thehttps://patchthecve.com/cve/CVE-2024-2588.htmlhttps://patchthecve.com/cve/CVE-2024-2588.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-2587.htmlhttps://patchthecve.com/cve/CVE-2024-2587.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the Dhttps://patchthecve.com/cve/CVE-2024-2586.htmlhttps://patchthecve.com/cve/CVE-2024-2586.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-2585.htmlhttps://patchthecve.com/cve/CVE-2024-2585.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.https://patchthecve.com/cve/CVE-2024-2584.htmlhttps://patchthecve.com/cve/CVE-2024-2584.htmlWed, 17 Jun 2026 07:24:50 +0000HIGH 8.2: Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.