https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1059.htmlhttps://patchthecve.com/cve/CVE-2026-1059.htmlWed, 17 Jun 2026 10:14:55 +0000HIGH 7.3: A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried ouhttps://patchthecve.com/cve/CVE-2025-65879.htmlhttps://patchthecve.com/cve/CVE-2025-65879.htmlFri, 25 Sep 2026 23:10:00 +0000HIGH 8.1: Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delete() without validation. A remote authenthttps://patchthecve.com/cve/CVE-2025-65878.htmlhttps://patchthecve.com/cve/CVE-2025-65878.htmlFri, 25 Sep 2026 23:10:00 +0000HIGH 7.5: The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to thehttps://patchthecve.com/cve/CVE-2025-5163.htmlhttps://patchthecve.com/cve/CVE-2025-5163.htmlWed, 17 Jun 2026 09:47:21 +0000MEDIUM 5.3: A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affects an unknown part. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be usehttps://patchthecve.com/cve/CVE-2024-3616.htmlhttps://patchthecve.com/cve/CVE-2024-3616.htmlWed, 17 Jun 2026 07:44:38 +0000LOW 3.5: A vulnerability classified as problematic was found in SourceCodester Warehouse Management System 1.0. This vulnerability affects unknown code of the file pengguna.php. The manipulation of the argument admin_user/admin_nama/admin_alamat/admin_telepon leads to cross site scripting. The attack can be https://patchthecve.com/cve/CVE-2024-3614.htmlhttps://patchthecve.com/cve/CVE-2024-3614.htmlWed, 17 Jun 2026 07:44:38 +0000LOW 3.5: A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument nama_customer/alamat_customer/notelp_customer leads to cross site scripting. It is possible to initiate https://patchthecve.com/cve/CVE-2024-3613.htmlhttps://patchthecve.com/cve/CVE-2024-3613.htmlWed, 17 Jun 2026 07:44:37 +0000LOW 3.5: A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file supplier.php. The manipulation of the argument nama_supplier/alamat_supplier/notelp_supplier leads to cross site scripting. https://patchthecve.com/cve/CVE-2024-3612.htmlhttps://patchthecve.com/cve/CVE-2024-3612.htmlWed, 17 Jun 2026 07:44:37 +0000LOW 3.5: A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument nama_barang/merek leads to cross site scripting. The attack can be lau