https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8989.htmlhttps://patchthecve.com/cve/CVE-2025-8989.htmlWed, 17 Jun 2026 10:08:06 +0000HIGH 7.3: A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosehttps://patchthecve.com/cve/CVE-2025-8988.htmlhttps://patchthecve.com/cve/CVE-2025-8988.htmlWed, 17 Jun 2026 10:08:05 +0000HIGH 7.3: A vulnerability has been found in SourceCodester COVID 19 Testing Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2025-8987.htmlhttps://patchthecve.com/cve/CVE-2025-8987.htmlWed, 17 Jun 2026 10:08:05 +0000HIGH 7.3: A vulnerability was identified in SourceCodester COVID 19 Testing Management System 1.0. This affects an unknown part of the file /test-details.php. The manipulation of the argument remark leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the phttps://patchthecve.com/cve/CVE-2025-8986.htmlhttps://patchthecve.com/cve/CVE-2025-8986.htmlWed, 17 Jun 2026 10:08:05 +0000HIGH 7.3: A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may be launched remotely. The exploit hahttps://patchthecve.com/cve/CVE-2025-8985.htmlhttps://patchthecve.com/cve/CVE-2025-8985.htmlWed, 17 Jun 2026 10:08:05 +0000HIGH 7.3: A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2025-8953.htmlhttps://patchthecve.com/cve/CVE-2025-8953.htmlWed, 17 Jun 2026 10:08:01 +0000HIGH 7.3: A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. The attack may be launched remotely. The exploit has https://patchthecve.com/cve/CVE-2025-8926.htmlhttps://patchthecve.com/cve/CVE-2025-8926.htmlWed, 17 Jun 2026 10:07:55 +0000HIGH 7.3: A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosedhttps://patchthecve.com/cve/CVE-2025-6287.htmlhttps://patchthecve.com/cve/CVE-2025-6287.htmlWed, 17 Jun 2026 10:01:32 +0000LOW 3.5: A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. The ahttps://patchthecve.com/cve/CVE-2025-4174.htmlhttps://patchthecve.com/cve/CVE-2025-4174.htmlWed, 17 Jun 2026 09:32:42 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. Thttps://patchthecve.com/cve/CVE-2025-4071.htmlhttps://patchthecve.com/cve/CVE-2025-4071.htmlWed, 17 Jun 2026 09:32:26 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /test-details.php. The manipulation of the argument Status leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-4030.htmlhttps://patchthecve.com/cve/CVE-2025-4030.htmlWed, 17 Jun 2026 09:32:21 +0000HIGH 7.3: A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to initiate the attack remotely. Thttps://patchthecve.com/cve/CVE-2025-4028.htmlhttps://patchthecve.com/cve/CVE-2025-4028.htmlWed, 17 Jun 2026 09:32:20 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotelhttps://patchthecve.com/cve/CVE-2025-4005.htmlhttps://patchthecve.com/cve/CVE-2025-4005.htmlWed, 17 Jun 2026 09:32:17 +0000HIGH 7.3: A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The explhttps://patchthecve.com/cve/CVE-2025-4004.htmlhttps://patchthecve.com/cve/CVE-2025-4004.htmlWed, 17 Jun 2026 09:32:17 +0000HIGH 7.3: A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. The attack can be initiated remotelhttps://patchthecve.com/cve/CVE-2025-3976.htmlhttps://patchthecve.com/cve/CVE-2025-3976.htmlWed, 17 Jun 2026 09:21:02 +0000HIGH 7.3: A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /new-user-testing.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. Thhttps://patchthecve.com/cve/CVE-2025-3974.htmlhttps://patchthecve.com/cve/CVE-2025-3974.htmlWed, 17 Jun 2026 09:21:02 +0000HIGH 7.3: A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-phlebotomist.php?pid=11. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-3973.htmlhttps://patchthecve.com/cve/CVE-2025-3973.htmlWed, 17 Jun 2026 09:21:02 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument mobnumber leads to sql injection. It is possible to initiate the attack remotely. The ehttps://patchthecve.com/cve/CVE-2025-3972.htmlhttps://patchthecve.com/cve/CVE-2025-3972.htmlWed, 17 Jun 2026 09:21:01 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument todate leads to sql injection. The attack may be launchhttps://patchthecve.com/cve/CVE-2025-3971.htmlhttps://patchthecve.com/cve/CVE-2025-3971.htmlWed, 17 Jun 2026 09:21:01 +0000HIGH 7.3: A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack can be launched remotely. The https://patchthecve.com/cve/CVE-2024-53635.htmlhttps://patchthecve.com/cve/CVE-2024-53635.htmlWed, 17 Jun 2026 08:09:03 +0000MEDIUM 4.8: A Reflected Cross Site Scripting (XSS) vulnerability was found in /covid-tms/patient-search-report.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata POST request parameter.https://patchthecve.com/cve/CVE-2024-53604.htmlhttps://patchthecve.com/cve/CVE-2024-53604.htmlWed, 17 Jun 2026 08:09:01 +0000CRITICAL 9.8: A SQL Injection vulnerability was found in /covid-tms/check_availability.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the mobnumber POST request parameter.https://patchthecve.com/cve/CVE-2024-53603.htmlhttps://patchthecve.com/cve/CVE-2024-53603.htmlWed, 17 Jun 2026 08:09:01 +0000HIGH 7.3: A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.