https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3141.htmlhttps://patchthecve.com/cve/CVE-2025-3141.htmlWed, 17 Jun 2026 09:19:15 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-3140.htmlhttps://patchthecve.com/cve/CVE-2025-3140.htmlWed, 17 Jun 2026 09:19:15 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /view_category.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit hahttps://patchthecve.com/cve/CVE-2024-46293.htmlhttps://patchthecve.com/cve/CVE-2024-46293.htmlWed, 17 Jun 2026 07:55:15 +0000CRITICAL 9.8: Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether the https://patchthecve.com/cve/CVE-2024-32167.htmlhttps://patchthecve.com/cve/CVE-2024-32167.htmlWed, 17 Jun 2026 07:29:23 +0000CRITICAL 9.1: Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files.