https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-43657.htmlhttps://patchthecve.com/cve/CVE-2021-43657.htmlWed, 17 Jun 2026 04:11:13 +0000MEDIUM 5.4: A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields.https://patchthecve.com/cve/CVE-2022-29984.htmlhttps://patchthecve.com/cve/CVE-2022-29984.htmlWed, 17 Jun 2026 04:41:05 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.https://patchthecve.com/cve/CVE-2022-29983.htmlhttps://patchthecve.com/cve/CVE-2022-29983.htmlWed, 17 Jun 2026 04:41:05 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.https://patchthecve.com/cve/CVE-2022-29982.htmlhttps://patchthecve.com/cve/CVE-2022-29982.htmlWed, 17 Jun 2026 04:41:04 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.https://patchthecve.com/cve/CVE-2022-29981.htmlhttps://patchthecve.com/cve/CVE-2022-29981.htmlWed, 17 Jun 2026 04:41:04 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.https://patchthecve.com/cve/CVE-2022-29980.htmlhttps://patchthecve.com/cve/CVE-2022-29980.htmlWed, 17 Jun 2026 04:41:04 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.https://patchthecve.com/cve/CVE-2022-29979.htmlhttps://patchthecve.com/cve/CVE-2022-29979.htmlWed, 17 Jun 2026 04:41:04 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.https://patchthecve.com/cve/CVE-2022-29751.htmlhttps://patchthecve.com/cve/CVE-2022-29751.htmlWed, 17 Jun 2026 04:40:41 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.https://patchthecve.com/cve/CVE-2022-29750.htmlhttps://patchthecve.com/cve/CVE-2022-29750.htmlWed, 17 Jun 2026 04:40:41 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.https://patchthecve.com/cve/CVE-2022-29749.htmlhttps://patchthecve.com/cve/CVE-2022-29749.htmlWed, 17 Jun 2026 04:40:41 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.https://patchthecve.com/cve/CVE-2022-29748.htmlhttps://patchthecve.com/cve/CVE-2022-29748.htmlWed, 17 Jun 2026 04:40:40 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.https://patchthecve.com/cve/CVE-2022-29747.htmlhttps://patchthecve.com/cve/CVE-2022-29747.htmlWed, 17 Jun 2026 04:40:40 +0000CRITICAL 9.8: Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.https://patchthecve.com/cve/CVE-2021-43484.htmlhttps://patchthecve.com/cve/CVE-2021-43484.htmlWed, 17 Jun 2026 04:11:01 +0000CRITICAL 9.8: A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request.https://patchthecve.com/cve/CVE-2021-43506.htmlhttps://patchthecve.com/cve/CVE-2021-43506.htmlWed, 17 Jun 2026 04:11:02 +0000CRITICAL 9.8: An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php.https://patchthecve.com/cve/CVE-2021-43505.htmlhttps://patchthecve.com/cve/CVE-2021-43505.htmlWed, 17 Jun 2026 04:11:02 +0000MEDIUM 5.4: Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1) Add new Client and (2) Add new invoice.https://patchthecve.com/cve/CVE-2022-26285.htmlhttps://patchthecve.com/cve/CVE-2022-26285.htmlWed, 17 Jun 2026 04:34:55 +0000CRITICAL 9.8: Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.https://patchthecve.com/cve/CVE-2022-26284.htmlhttps://patchthecve.com/cve/CVE-2022-26284.htmlWed, 17 Jun 2026 04:34:55 +0000CRITICAL 9.8: Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.https://patchthecve.com/cve/CVE-2021-43510.htmlhttps://patchthecve.com/cve/CVE-2021-43510.htmlWed, 17 Jun 2026 04:11:03 +0000CRITICAL 9.8: SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.https://patchthecve.com/cve/CVE-2021-43509.htmlhttps://patchthecve.com/cve/CVE-2021-43509.htmlWed, 17 Jun 2026 04:11:02 +0000CRITICAL 9.8: SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.