https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15495.htmlhttps://patchthecve.com/cve/CVE-2025-15495.htmlWed, 17 Jun 2026 08:37:53 +0000MEDIUM 4.7: A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor washttps://patchthecve.com/cve/CVE-2025-15263.htmlhttps://patchthecve.com/cve/CVE-2025-15263.htmlWed, 17 Jun 2026 08:37:29 +0000HIGH 7.3: A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been made avaihttps://patchthecve.com/cve/CVE-2025-15262.htmlhttps://patchthecve.com/cve/CVE-2025-15262.htmlWed, 17 Jun 2026 08:37:29 +0000MEDIUM 4.7: A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The exhttps://patchthecve.com/cve/CVE-2025-15169.htmlhttps://patchthecve.com/cve/CVE-2025-15169.htmlWed, 07 Oct 2026 12:10:00 +0000MEDIUM 4.7: A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available t