https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4937.htmlhttps://patchthecve.com/cve/CVE-2025-4937.htmlWed, 17 Jun 2026 09:34:21 +0000HIGH 7.3: A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launchedhttps://patchthecve.com/cve/CVE-2025-4481.htmlhttps://patchthecve.com/cve/CVE-2025-4481.htmlWed, 17 Jun 2026 09:33:20 +0000HIGH 7.3: A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. Thehttps://patchthecve.com/cve/CVE-2025-3315.htmlhttps://patchthecve.com/cve/CVE-2025-3315.htmlWed, 17 Jun 2026 09:19:39 +0000HIGH 7.3: A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remothttps://patchthecve.com/cve/CVE-2025-3314.htmlhttps://patchthecve.com/cve/CVE-2025-3314.htmlWed, 17 Jun 2026 09:19:38 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forgotpw.php. The manipulation of the argument secode leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2025-3143.htmlhttps://patchthecve.com/cve/CVE-2025-3143.htmlWed, 17 Jun 2026 09:19:16 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. The https://patchthecve.com/cve/CVE-2025-3142.htmlhttps://patchthecve.com/cve/CVE-2025-3142.htmlWed, 17 Jun 2026 09:19:15 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument buildingno leads to sql injection. The attack may be initiated remotely. Thehttps://patchthecve.com/cve/CVE-2025-3045.htmlhttps://patchthecve.com/cve/CVE-2025-3045.htmlWed, 17 Jun 2026 09:19:05 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotel