https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2003-0751.htmlhttps://patchthecve.com/cve/CVE-2003-0751.htmlTue, 16 Jun 2026 22:02:45 +0000HIGH 7.5: SQL injection vulnerability in pass_done.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter.https://patchthecve.com/cve/CVE-2003-0750.htmlhttps://patchthecve.com/cve/CVE-2003-0750.htmlTue, 16 Jun 2026 22:02:45 +0000HIGH 7.5: secure.php in PY-Membres 4.2 and earlier allows remote attackers to bypass authentication by setting the adminpy parameter.https://patchthecve.com/cve/CVE-2002-1884.htmlhttps://patchthecve.com/cve/CVE-2002-1884.htmlTue, 16 Jun 2026 22:00:14 +0000HIGH 7.5: index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin".