PatchTheCVE: alcasarhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-38295: ALCASAR before 3.6.1 allows still_connected.php remote code execution.https://patchthecve.com/cve/CVE-2024-38295.htmlhttps://patchthecve.com/cve/CVE-2024-38295.htmlWed, 17 Jun 2026 07:39:53 +0000CRITICAL 9.8: ALCASAR before 3.6.1 allows still_connected.php remote code execution.CVE-2024-38294: ALCASAR before 3.6.1 allows email_registration_back.php remote code execution.https://patchthecve.com/cve/CVE-2024-38294.htmlhttps://patchthecve.com/cve/CVE-2024-38294.htmlWed, 17 Jun 2026 07:39:53 +0000CRITICAL 9.8: ALCASAR before 3.6.1 allows email_registration_back.php remote code execution.CVE-2024-38293: ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.https://patchthecve.com/cve/CVE-2024-38293.htmlhttps://patchthecve.com/cve/CVE-2024-38293.htmlWed, 17 Jun 2026 07:39:53 +0000CRITICAL 9.6: ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php.