https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4813.htmlhttps://patchthecve.com/cve/CVE-2025-4813.htmlWed, 17 Jun 2026 09:34:04 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attachttps://patchthecve.com/cve/CVE-2025-4303.htmlhttps://patchthecve.com/cve/CVE-2025-4303.htmlWed, 17 Jun 2026 09:32:58 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack may bhttps://patchthecve.com/cve/CVE-2025-2375.htmlhttps://patchthecve.com/cve/CVE-2025-2375.htmlWed, 17 Jun 2026 09:06:51 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected is an unknown function of the file /profile.php of the component Admin Profile Page. The manipulation of the argument email leads to cross site scripting. It ishttps://patchthecve.com/cve/CVE-2025-2374.htmlhttps://patchthecve.com/cve/CVE-2025-2374.htmlWed, 17 Jun 2026 09:06:51 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The attahttps://patchthecve.com/cve/CVE-2025-2373.htmlhttps://patchthecve.com/cve/CVE-2025-2373.htmlWed, 17 Jun 2026 09:06:51 +0000MEDIUM 6.3: A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This vulnerability affects unknown code of the file /check_availability.php. The manipulation of the argument mobnumber/employeeid leads to sql injection. The attack can be initiated rhttps://patchthecve.com/cve/CVE-2025-2372.htmlhttps://patchthecve.com/cve/CVE-2025-2372.htmlWed, 17 Jun 2026 09:06:51 +0000HIGH 7.3: A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. It is pohttps://patchthecve.com/cve/CVE-2025-2371.htmlhttps://patchthecve.com/cve/CVE-2025-2371.htmlWed, 17 Jun 2026 09:06:51 +0000LOW 3.5: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /registered-user-testing.php of the component Registered Mobile Number Search. The manipulation of the argumhttps://patchthecve.com/cve/CVE-2025-1954.htmlhttps://patchthecve.com/cve/CVE-2025-1954.htmlWed, 17 Jun 2026 08:40:25 +0000HIGH 7.3: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument username leads to sql injection. The attack can be launch