https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3153.htmlhttps://patchthecve.com/cve/CVE-2026-3153.htmlWed, 17 Jun 2026 10:43:08 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and https://patchthecve.com/cve/CVE-2026-3133.htmlhttps://patchthecve.com/cve/CVE-2026-3133.htmlWed, 17 Jun 2026 10:43:05 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Document Management System 1.0. This issue affects some unknown processing of the file /loging.php of the component Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has bhttps://patchthecve.com/cve/CVE-2026-3069.htmlhttps://patchthecve.com/cve/CVE-2026-3069.htmlWed, 17 Jun 2026 10:43:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Document Management System 1.0. Affected is an unknown function of the file /edtlbls.php. The manipulation of the argument field1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may bhttps://patchthecve.com/cve/CVE-2026-3068.htmlhttps://patchthecve.com/cve/CVE-2026-3068.htmlWed, 17 Jun 2026 10:42:59 +0000HIGH 7.3: A weakness has been identified in itsourcecode Document Management System 1.0. This impacts an unknown function of the file /deluser.php. Executing a manipulation of the argument user2del can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the publihttps://patchthecve.com/cve/CVE-2026-3043.htmlhttps://patchthecve.com/cve/CVE-2026-3043.htmlWed, 17 Jun 2026 10:42:55 +0000MEDIUM 4.3: A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and mahttps://patchthecve.com/cve/CVE-2026-3042.htmlhttps://patchthecve.com/cve/CVE-2026-3042.htmlWed, 17 Jun 2026 10:42:55 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and https://patchthecve.com/cve/CVE-2026-2867.htmlhttps://patchthecve.com/cve/CVE-2026-2867.htmlWed, 17 Jun 2026 10:31:55 +0000HIGH 7.3: A vulnerability was determined in itsourcecode Vehicle Management System 1.0. Affected is an unknown function of the file /billaction.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be uthttps://patchthecve.com/cve/CVE-2025-15167.htmlhttps://patchthecve.com/cve/CVE-2025-15167.htmlWed, 07 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may bhttps://patchthecve.com/cve/CVE-2025-15166.htmlhttps://patchthecve.com/cve/CVE-2025-15166.htmlWed, 07 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be ushttps://patchthecve.com/cve/CVE-2025-15165.htmlhttps://patchthecve.com/cve/CVE-2025-15165.htmlWed, 07 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-14832.htmlhttps://patchthecve.com/cve/CVE-2025-14832.htmlWed, 17 Jun 2026 08:36:37 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly ahttps://patchthecve.com/cve/CVE-2025-14652.htmlhttps://patchthecve.com/cve/CVE-2025-14652.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and coulhttps://patchthecve.com/cve/CVE-2025-14650.htmlhttps://patchthecve.com/cve/CVE-2025-14650.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-14649.htmlhttps://patchthecve.com/cve/CVE-2025-14649.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is now phttps://patchthecve.com/cve/CVE-2025-9793.htmlhttps://patchthecve.com/cve/CVE-2025-9793.htmlWed, 17 Jun 2026 10:09:46 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component Setting Handler. Performing manipulation of the argument ddlBranch results in sql injection. The attack is possible to be carried out remotelyhttps://patchthecve.com/cve/CVE-2025-9792.htmlhttps://patchthecve.com/cve/CVE-2025-9792.htmlWed, 17 Jun 2026 10:09:46 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /e_dashboard/e_all_info.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-9730.htmlhttps://patchthecve.com/cve/CVE-2025-9730.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument user_id results in sql injection. It is possible to launch the attack remotely. The exploit has been made publihttps://patchthecve.com/cve/CVE-2025-9645.htmlhttps://patchthecve.com/cve/CVE-2025-9645.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manipulation of the argument mid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be usedhttps://patchthecve.com/cve/CVE-2025-9644.htmlhttps://patchthecve.com/cve/CVE-2025-9644.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/bill_setup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the attack remotely. The exhttps://patchthecve.com/cve/CVE-2025-9643.htmlhttps://patchthecve.com/cve/CVE-2025-9643.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utility_bill_setup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initiate the attack remotehttps://patchthecve.com/cve/CVE-2025-9601.htmlhttps://patchthecve.com/cve/CVE-2025-9601.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be uhttps://patchthecve.com/cve/CVE-2025-9600.htmlhttps://patchthecve.com/cve/CVE-2025-9600.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2025-9599.htmlhttps://patchthecve.com/cve/CVE-2025-9599.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The exphttps://patchthecve.com/cve/CVE-2025-9598.htmlhttps://patchthecve.com/cve/CVE-2025-9598.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released to https://patchthecve.com/cve/CVE-2025-9597.htmlhttps://patchthecve.com/cve/CVE-2025-9597.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly availablehttps://patchthecve.com/cve/CVE-2025-9594.htmlhttps://patchthecve.com/cve/CVE-2025-9594.htmlSat, 26 Sep 2026 00:10:00 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2025-9593.htmlhttps://patchthecve.com/cve/CVE-2025-9593.htmlSat, 26 Sep 2026 00:10:00 +0000HIGH 7.3: A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9592.htmlhttps://patchthecve.com/cve/CVE-2025-9592.htmlSat, 26 Sep 2026 00:10:00 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public ahttps://patchthecve.com/cve/CVE-2025-9511.htmlhttps://patchthecve.com/cve/CVE-2025-9511.htmlWed, 17 Jun 2026 10:09:08 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /visitor/addvisitor.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available anhttps://patchthecve.com/cve/CVE-2025-9510.htmlhttps://patchthecve.com/cve/CVE-2025-9510.htmlWed, 17 Jun 2026 10:09:08 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /branch/addbranch.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-9509.htmlhttps://patchthecve.com/cve/CVE-2025-9509.htmlWed, 17 Jun 2026 10:09:08 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fair_info_all.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been relehttps://patchthecve.com/cve/CVE-2025-9508.htmlhttps://patchthecve.com/cve/CVE-2025-9508.htmlWed, 17 Jun 2026 10:09:08 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rented_info.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be usehttps://patchthecve.com/cve/CVE-2025-9507.htmlhttps://patchthecve.com/cve/CVE-2025-9507.htmlWed, 17 Jun 2026 10:09:07 +0000HIGH 7.3: A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitor_info.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the https://patchthecve.com/cve/CVE-2025-9472.htmlhttps://patchthecve.com/cve/CVE-2025-9472.htmlWed, 17 Jun 2026 10:09:03 +0000HIGH 7.3: A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /owner_utility/add_owner_utility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public https://patchthecve.com/cve/CVE-2025-9471.htmlhttps://patchthecve.com/cve/CVE-2025-9471.htmlWed, 17 Jun 2026 10:09:03 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /maintenance/add_maintenance_cost.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-9470.htmlhttps://patchthecve.com/cve/CVE-2025-9470.htmlWed, 17 Jun 2026 10:09:03 +0000HIGH 7.3: A flaw has been found in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /management/add_m_committee.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9469.htmlhttps://patchthecve.com/cve/CVE-2025-9469.htmlWed, 17 Jun 2026 10:09:03 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/add_fund.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and https://patchthecve.com/cve/CVE-2025-9468.htmlhttps://patchthecve.com/cve/CVE-2025-9468.htmlWed, 17 Jun 2026 10:09:03 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /bill/add_bill.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-9421.htmlhttps://patchthecve.com/cve/CVE-2025-9421.htmlWed, 17 Jun 2026 10:08:56 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the file /complain/addcomplain.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and mhttps://patchthecve.com/cve/CVE-2025-9420.htmlhttps://patchthecve.com/cve/CVE-2025-9420.htmlWed, 17 Jun 2026 10:08:56 +0000HIGH 7.3: A flaw has been found in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /floor/addfloor.php. Executing manipulation of the argument hdnid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be uhttps://patchthecve.com/cve/CVE-2025-9419.htmlhttps://patchthecve.com/cve/CVE-2025-9419.htmlWed, 17 Jun 2026 10:08:56 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /unit/addunit.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be usehttps://patchthecve.com/cve/CVE-2025-9418.htmlhttps://patchthecve.com/cve/CVE-2025-9418.htmlWed, 17 Jun 2026 10:08:56 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /owner/addowner.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publihttps://patchthecve.com/cve/CVE-2025-9417.htmlhttps://patchthecve.com/cve/CVE-2025-9417.htmlWed, 17 Jun 2026 10:08:55 +0000MEDIUM 6.3: A weakness has been identified in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /employee/addemployee.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availhttps://patchthecve.com/cve/CVE-2025-9311.htmlhttps://patchthecve.com/cve/CVE-2025-9311.htmlWed, 17 Jun 2026 10:08:43 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fair/addfair.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availhttps://patchthecve.com/cve/CVE-2025-4488.htmlhttps://patchthecve.com/cve/CVE-2025-4488.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_package. The manipulation of the argument ID leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2025-4487.htmlhttps://patchthecve.com/cve/CVE-2025-4487.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-4486.htmlhttps://patchthecve.com/cve/CVE-2025-4486.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_plan. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-4485.htmlhttps://patchthecve.com/cve/CVE-2025-4485.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=delete_trainer. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-4484.htmlhttps://patchthecve.com/cve/CVE-2025-4484.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-4483.htmlhttps://patchthecve.com/cve/CVE-2025-4483.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_pdetails.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The explo