https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15404.htmlhttps://patchthecve.com/cve/CVE-2025-15404.htmlWed, 07 Oct 2026 11:10:00 +0000MEDIUM 6.3: A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-14209.htmlhttps://patchthecve.com/cve/CVE-2025-14209.htmlWed, 07 Oct 2026 20:10:01 +0000HIGH 7.3: A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /update_query.php. This manipulation of the argument stud_id causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and chttps://patchthecve.com/cve/CVE-2025-13555.htmlhttps://patchthecve.com/cve/CVE-2025-13555.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument stud_no results in sql injection. The attack can be initiated remotely. The exploit is now public and https://patchthecve.com/cve/CVE-2025-12873.htmlhttps://patchthecve.com/cve/CVE-2025-12873.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 4.7: A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to thehttps://patchthecve.com/cve/CVE-2021-46824.htmlhttps://patchthecve.com/cve/CVE-2021-46824.htmlWed, 17 Jun 2026 04:15:37 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in student_profile.php.https://patchthecve.com/cve/CVE-2021-29055.htmlhttps://patchthecve.com/cve/CVE-2021-29055.htmlWed, 17 Jun 2026 03:47:12 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in student_profile.php.