https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15197.htmlhttps://patchthecve.com/cve/CVE-2025-15197.htmlWed, 07 Oct 2026 12:10:00 +0000MEDIUM 4.7: A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2023-38913.htmlhttps://patchthecve.com/cve/CVE-2023-38913.htmlWed, 17 Jun 2026 06:11:18 +0000MEDIUM 5.3: SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script.https://patchthecve.com/cve/CVE-2025-5633.htmlhttps://patchthecve.com/cve/CVE-2025-5633.htmlWed, 17 Jun 2026 09:48:21 +0000MEDIUM 6.3: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be lahttps://patchthecve.com/cve/CVE-2025-5632.htmlhttps://patchthecve.com/cve/CVE-2025-5632.htmlWed, 17 Jun 2026 09:48:21 +0000MEDIUM 6.3: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads to sql injection. Thhttps://patchthecve.com/cve/CVE-2025-5631.htmlhttps://patchthecve.com/cve/CVE-2025-5631.htmlWed, 17 Jun 2026 09:48:21 +0000HIGH 7.3: A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to launch the attack rehttps://patchthecve.com/cve/CVE-2024-10758.htmlhttps://patchthecve.com/cve/CVE-2024-10758.htmlWed, 17 Jun 2026 06:56:22 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument user_name leads to sql injection. It is possible to initiate the attack remot