<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: staff audit system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-7181: A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-7181.html</link><guid>https://patchthecve.com/cve/CVE-2025-7181.html</guid><pubDate>Wed, 17 Jun 2026 10:04:27 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been </description></item><item><title>CVE-2025-7180: A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-7180.html</link><guid>https://patchthecve.com/cve/CVE-2025-7180.html</guid><pubDate>Wed, 17 Jun 2026 10:04:26 +0000</pubDate><description>HIGH 7.3: A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely. The exploit has been discl</description></item><item><title>CVE-2025-6884: A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-6884.html</link><guid>https://patchthecve.com/cve/CVE-2025-6884.html</guid><pubDate>Wed, 17 Jun 2026 10:02:46 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /search_index.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has b</description></item><item><title>CVE-2025-6883: A vulnerability classified as critical was found in code-projects Staff Audit System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-6883.html</link><guid>https://patchthecve.com/cve/CVE-2025-6883.html</guid><pubDate>Wed, 17 Jun 2026 10:02:45 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php. The manipulation of the argument updateid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t</description></item></channel></rss>