https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-24323.htmlhttps://patchthecve.com/cve/CVE-2026-24323.htmlWed, 17 Jun 2026 10:22:54 +0000MEDIUM 6.1: The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and https://patchthecve.com/cve/CVE-2026-0505.htmlhttps://patchthecve.com/cve/CVE-2026-0505.htmlWed, 17 Jun 2026 10:10:51 +0000MEDIUM 6.1: The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availabilihttps://patchthecve.com/cve/CVE-2025-29390.htmlhttps://patchthecve.com/cve/CVE-2025-29390.htmlWed, 17 Jun 2026 09:05:20 +0000HIGH 8.8: jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php.https://patchthecve.com/cve/CVE-2024-42565.htmlhttps://patchthecve.com/cve/CVE-2024-42565.htmlWed, 17 Jun 2026 07:49:39 +0000CRITICAL 9.8: ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.https://patchthecve.com/cve/CVE-2024-42564.htmlhttps://patchthecve.com/cve/CVE-2024-42564.htmlWed, 17 Jun 2026 07:49:39 +0000HIGH 7.6: ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete.https://patchthecve.com/cve/CVE-2024-42563.htmlhttps://patchthecve.com/cve/CVE-2024-42563.htmlWed, 17 Jun 2026 07:49:39 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.