https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-8292.htmlhttps://patchthecve.com/cve/CVE-2019-8292.htmlWed, 17 Jun 2026 02:41:49 +0000MEDIUM 5.3: Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.https://patchthecve.com/cve/CVE-2019-8291.htmlhttps://patchthecve.com/cve/CVE-2019-8291.htmlWed, 17 Jun 2026 02:41:49 +0000HIGH 7.5: Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.https://patchthecve.com/cve/CVE-2019-8290.htmlhttps://patchthecve.com/cve/CVE-2019-8290.htmlWed, 17 Jun 2026 02:41:49 +0000MEDIUM 6.1: Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.https://patchthecve.com/cve/CVE-2019-8289.htmlhttps://patchthecve.com/cve/CVE-2019-8289.htmlWed, 17 Jun 2026 02:41:48 +0000MEDIUM 5.4: Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variablehttps://patchthecve.com/cve/CVE-2019-8288.htmlhttps://patchthecve.com/cve/CVE-2019-8288.htmlWed, 17 Jun 2026 02:41:48 +0000MEDIUM 5.4: Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.