https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-69564.htmlhttps://patchthecve.com/cve/CVE-2025-69564.htmlWed, 17 Jun 2026 10:00:44 +0000CRITICAL 9.8: code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserName, Password, confirm_password, Role, Branch, and Activate parameters.https://patchthecve.com/cve/CVE-2025-69563.htmlhttps://patchthecve.com/cve/CVE-2025-69563.htmlWed, 17 Jun 2026 10:00:44 +0000CRITICAL 9.8: code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter.https://patchthecve.com/cve/CVE-2025-69562.htmlhttps://patchthecve.com/cve/CVE-2025-69562.htmlWed, 17 Jun 2026 10:00:44 +0000CRITICAL 9.8: code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter.https://patchthecve.com/cve/CVE-2025-69565.htmlhttps://patchthecve.com/cve/CVE-2025-69565.htmlWed, 17 Jun 2026 10:00:44 +0000CRITICAL 9.8: code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php.https://patchthecve.com/cve/CVE-2025-9841.htmlhttps://patchthecve.com/cve/CVE-2025-9841.htmlWed, 17 Jun 2026 10:09:52 +0000MEDIUM 6.3: A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit ha