https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15423.htmlhttps://patchthecve.com/cve/CVE-2025-15423.htmlWed, 07 Oct 2026 11:10:00 +0000MEDIUM 6.3: A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The venhttps://patchthecve.com/cve/CVE-2025-15422.htmlhttps://patchthecve.com/cve/CVE-2025-15422.htmlWed, 07 Oct 2026 11:10:00 +0000MEDIUM 5.3: A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. The exploit has been published and may be https://patchthecve.com/cve/CVE-2023-50162.htmlhttps://patchthecve.com/cve/CVE-2023-50162.htmlWed, 17 Jun 2026 06:39:13 +0000HIGH 7.2: SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the DoExecSql function.https://patchthecve.com/cve/CVE-2023-50073.htmlhttps://patchthecve.com/cve/CVE-2023-50073.htmlWed, 17 Jun 2026 06:39:08 +0000CRITICAL 9.8: EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php.