https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-4654.htmlhttps://patchthecve.com/cve/CVE-2024-4654.htmlWed, 17 Jun 2026 08:02:20 +0000MEDIUM 6.3: A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/cloudInterface.php. The manipulation of the argument INSTI_CODE leads to sql injection. It is possible to initiate the attack remotely. Thhttps://patchthecve.com/cve/CVE-2024-4653.htmlhttps://patchthecve.com/cve/CVE-2024-4653.htmlWed, 17 Jun 2026 08:02:20 +0000MEDIUM 6.3: A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1 and classified as critical. Affected by this issue is some unknown functionality of the file /xds/outIndex.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2024-4257.htmlhttps://patchthecve.com/cve/CVE-2024-4257.htmlWed, 17 Jun 2026 08:01:32 +0000MEDIUM 6.3: A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/deleteStudy.php. The manipulation of the argument documentUniqueId leads to sql injection. It is possible to initiate the attack remotely.