https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-14601.htmlhttps://patchthecve.com/cve/CVE-2017-14601.htmlWed, 17 Jun 2026 01:06:27 +0000MEDIUM 4.9: Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure.https://patchthecve.com/cve/CVE-2017-14600.htmlhttps://patchthecve.com/cve/CVE-2017-14600.htmlWed, 17 Jun 2026 01:06:27 +0000MEDIUM 4.9: Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure.https://patchthecve.com/cve/CVE-2015-4627.htmlhttps://patchthecve.com/cve/CVE-2015-4627.htmlWed, 17 Jun 2026 00:27:37 +0000CRITICAL 9.8: SQL injection vulnerability in Pragyan CMS 3.0.https://patchthecve.com/cve/CVE-2012-6500.htmlhttps://patchthecve.com/cve/CVE-2012-6500.htmlTue, 16 Jun 2026 23:48:14 +0000MEDIUM 5.0: Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to index.php.