https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-35359.htmlhttps://patchthecve.com/cve/CVE-2024-35359.htmlWed, 17 Jun 2026 07:34:48 +0000CRITICAL 9.8: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35353.htmlhttps://patchthecve.com/cve/CVE-2024-35353.htmlWed, 17 Jun 2026 07:34:47 +0000CRITICAL 9.8: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization.https://patchthecve.com/cve/CVE-2024-35352.htmlhttps://patchthecve.com/cve/CVE-2024-35352.htmlWed, 17 Jun 2026 07:34:47 +0000MEDIUM 6.1: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting.https://patchthecve.com/cve/CVE-2024-35351.htmlhttps://patchthecve.com/cve/CVE-2024-35351.htmlWed, 17 Jun 2026 07:34:47 +0000MEDIUM 5.4: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulating the parameter name results in cross-site scripting.https://patchthecve.com/cve/CVE-2024-35350.htmlhttps://patchthecve.com/cve/CVE-2024-35350.htmlWed, 17 Jun 2026 07:34:47 +0000CRITICAL 9.8: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35349.htmlhttps://patchthecve.com/cve/CVE-2024-35349.htmlWed, 17 Jun 2026 07:34:47 +0000CRITICAL 9.8: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35358.htmlhttps://patchthecve.com/cve/CVE-2024-35358.htmlWed, 17 Jun 2026 07:34:48 +0000MEDIUM 6.5: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35357.htmlhttps://patchthecve.com/cve/CVE-2024-35357.htmlWed, 17 Jun 2026 07:34:48 +0000MEDIUM 5.3: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35356.htmlhttps://patchthecve.com/cve/CVE-2024-35356.htmlWed, 17 Jun 2026 07:34:48 +0000MEDIUM 6.3: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35355.htmlhttps://patchthecve.com/cve/CVE-2024-35355.htmlWed, 17 Jun 2026 07:34:48 +0000CRITICAL 9.8: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35354.htmlhttps://patchthecve.com/cve/CVE-2024-35354.htmlWed, 17 Jun 2026 07:34:47 +0000CRITICAL 9.8: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection.https://patchthecve.com/cve/CVE-2024-35345.htmlhttps://patchthecve.com/cve/CVE-2024-35345.htmlWed, 17 Jun 2026 07:34:46 +0000MEDIUM 5.4: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripting.