https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13582.htmlhttps://patchthecve.com/cve/CVE-2025-13582.htmlThu, 08 Oct 2026 10:10:00 +0000HIGH 7.3: A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is https://patchthecve.com/cve/CVE-2025-7198.htmlhttps://patchthecve.com/cve/CVE-2025-7198.htmlWed, 17 Jun 2026 10:04:30 +0000HIGH 7.3: A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the phttps://patchthecve.com/cve/CVE-2025-7197.htmlhttps://patchthecve.com/cve/CVE-2025-7197.htmlWed, 17 Jun 2026 10:04:30 +0000HIGH 7.3: A vulnerability classified as critical has been found in code-projects Jonnys Liquor 1.0. This affects an unknown part of the file /admin/delete-row.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the https://patchthecve.com/cve/CVE-2025-7196.htmlhttps://patchthecve.com/cve/CVE-2025-7196.htmlWed, 17 Jun 2026 10:04:29 +0000HIGH 7.3: A vulnerability was found in code-projects Jonnys Liquor 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /browse.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been discloshttps://patchthecve.com/cve/CVE-2024-50969.htmlhttps://patchthecve.com/cve/CVE-2024-50969.htmlWed, 17 Jun 2026 08:05:12 +0000MEDIUM 6.1: A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter.