https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-23169.htmlhttps://patchthecve.com/cve/CVE-2022-23169.htmlWed, 17 Jun 2026 04:29:37 +0000MEDIUM 5.9: attacker needs to craft a SQL payload. the vulnerable parameter is "agentid" must be authenticated to the admin panel.https://patchthecve.com/cve/CVE-2022-23168.htmlhttps://patchthecve.com/cve/CVE-2022-23168.htmlWed, 17 Jun 2026 04:29:37 +0000MEDIUM 5.9: The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--https://patchthecve.com/cve/CVE-2022-23167.htmlhttps://patchthecve.com/cve/CVE-2022-23167.htmlWed, 17 Jun 2026 04:29:36 +0000MEDIUM 5.3: Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED.