https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-10584.htmlhttps://patchthecve.com/cve/CVE-2020-10584.htmlWed, 17 Jun 2026 02:48:02 +0000HIGH 7.5: A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application.https://patchthecve.com/cve/CVE-2020-10583.htmlhttps://patchthecve.com/cve/CVE-2020-10583.htmlWed, 17 Jun 2026 02:48:02 +0000HIGH 8.8: The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary OS commands on the server as the user running the application.https://patchthecve.com/cve/CVE-2020-10582.htmlhttps://patchthecve.com/cve/CVE-2020-10582.htmlWed, 17 Jun 2026 02:48:02 +0000CRITICAL 9.8: A SQL injection on the /admin/display_errors.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to execute arbitrary SQL requests (including data reading and modification) on the database.https://patchthecve.com/cve/CVE-2020-10581.htmlhttps://patchthecve.com/cve/CVE-2020-10581.htmlWed, 17 Jun 2026 02:48:02 +0000HIGH 7.5: Multiple session validity check issues in several administration functionalities of Invigo Automatic Device Management (ADM) through 5.0 allow remote attackers to read potentially sensitive data hosted by the application.https://patchthecve.com/cve/CVE-2020-10580.htmlhttps://patchthecve.com/cve/CVE-2020-10580.htmlWed, 17 Jun 2026 02:48:02 +0000HIGH 8.8: A command injection on the /admin/broadcast.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attackers to execute arbitrary PHP code on the server as the user running the application.https://patchthecve.com/cve/CVE-2020-10579.htmlhttps://patchthecve.com/cve/CVE-2020-10579.htmlWed, 17 Jun 2026 02:48:02 +0000HIGH 7.5: A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to list the content of arbitrary server directories accessible to the user running the application.