<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: project management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-0336: A vulnerability was found in Codezips Project Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0336.html</link><guid>https://patchthecve.com/cve/CVE-2025-0336.html</guid><pubDate>Wed, 17 Jun 2026 08:26:18 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has be</description></item><item><title>CVE-2025-0213: A vulnerability was found in Campcodes Project Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0213.html</link><guid>https://patchthecve.com/cve/CVE-2025-0213.html</guid><pubDate>Wed, 17 Jun 2026 08:26:05 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&amp;id=4. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated</description></item><item><title>CVE-2024-12926: A vulnerability classified as critical was found in Codezips Project Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12926.html</link><guid>https://patchthecve.com/cve/CVE-2024-12926.html</guid><pubDate>Wed, 17 Jun 2026 07:00:46 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit</description></item><item><title>CVE-2024-12231: A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12231.html</link><guid>https://patchthecve.com/cve/CVE-2024-12231.html</guid><pubDate>Wed, 17 Jun 2026 06:59:17 +0000</pubDate><description>HIGH 7.3: A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed t</description></item></channel></rss>