https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-56407.htmlhttps://patchthecve.com/cve/CVE-2025-56407.htmlWed, 17 Jun 2026 09:42:34 +0000HIGH 8.8: A vulnerability has been found in HuangDou UTCMS V9 and classified as critical. This vulnerability affects the function RunSql of the file app/modules/ut-data/admin/mysql.php. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-9402.htmlhttps://patchthecve.com/cve/CVE-2025-9402.htmlWed, 17 Jun 2026 10:08:53 +0000MEDIUM 4.7: A vulnerability was found in HuangDou UTCMS 9. This issue affects some unknown processing of the file app/modules/ut-frame/admin/update.php of the component Config Handler. Performing manipulation of the argument UPDATEURL results in server-side request forgery. The attack is possible to be carried https://patchthecve.com/cve/CVE-2025-9401.htmlhttps://patchthecve.com/cve/CVE-2025-9401.htmlWed, 17 Jun 2026 10:08:53 +0000LOW 3.7: A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison. The attack can be executed remotely. The attack requires a high l