https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-34081.htmlhttps://patchthecve.com/cve/CVE-2025-34081.htmlWed, 17 Jun 2026 09:13:26 +0000HIGH 7.5: The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.https://patchthecve.com/cve/CVE-2025-34080.htmlhttps://patchthecve.com/cve/CVE-2025-34080.htmlWed, 17 Jun 2026 09:13:26 +0000MEDIUM 6.1: The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.https://patchthecve.com/cve/CVE-2023-29154.htmlhttps://patchthecve.com/cve/CVE-2023-29154.htmlWed, 28 Oct 2026 19:10:00 +0000HIGH 7.2: SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.