https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9843.htmlhttps://patchthecve.com/cve/CVE-2025-9843.htmlWed, 17 Jun 2026 10:09:53 +0000MEDIUM 5.3: A flaw has been found in Das Parking Management System 停车场管理系统 6.2.0. Affected is an unknown function of the file /Operator/FindAll. This manipulation causes information disclosure. It is possible to initiate the attack remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9842.htmlhttps://patchthecve.com/cve/CVE-2025-9842.htmlWed, 17 Jun 2026 10:09:53 +0000MEDIUM 5.3: A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-6118.htmlhttps://patchthecve.com/cve/CVE-2025-6118.htmlWed, 17 Jun 2026 10:01:11 +0000HIGH 7.3: A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been rated as critical. This issue affects some unknown processing of the file /vehicle/search of the component API. The manipulation of the argument vehicleTypeCode leads to sql injection. The attack may be initiated rhttps://patchthecve.com/cve/CVE-2025-6117.htmlhttps://patchthecve.com/cve/CVE-2025-6117.htmlWed, 17 Jun 2026 10:01:11 +0000HIGH 7.3: A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnerability affects unknown code of the file /Reservations/Search of the component API. The manipulation of the argument Value leads to sql injection. The attack can be initiated remotehttps://patchthecve.com/cve/CVE-2025-6116.htmlhttps://patchthecve.com/cve/CVE-2025-6116.htmlWed, 17 Jun 2026 10:01:11 +0000HIGH 7.3: A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the argument Value leads to sql injection. It is possible to initiate the attack