https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-56608.htmlhttps://patchthecve.com/cve/CVE-2025-56608.htmlWed, 17 Jun 2026 09:42:42 +0000MEDIUM 4.2: The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in `OkHttpClientWrapper.java`. The `handleDigest()` function employs `MessageDigest.getInstance("MD5")` to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collhttps://patchthecve.com/cve/CVE-2025-9690.htmlhttps://patchthecve.com/cve/CVE-2025-9690.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 6.3: A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9689.htmlhttps://patchthecve.com/cve/CVE-2025-9689.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 6.3: A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now puhttps://patchthecve.com/cve/CVE-2025-9306.htmlhttps://patchthecve.com/cve/CVE-2025-9306.htmlWed, 17 Jun 2026 10:08:43 +0000LOW 3.5: A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely. Thehttps://patchthecve.com/cve/CVE-2025-4504.htmlhttps://patchthecve.com/cve/CVE-2025-4504.htmlWed, 17 Jun 2026 09:33:24 +0000HIGH 7.3: A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-4314.htmlhttps://patchthecve.com/cve/CVE-2025-4314.htmlWed, 17 Jun 2026 09:33:00 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-4313.htmlhttps://patchthecve.com/cve/CVE-2025-4313.htmlWed, 17 Jun 2026 09:33:00 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/admin_addnew_product.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The exphttps://patchthecve.com/cve/CVE-2025-4312.htmlhttps://patchthecve.com/cve/CVE-2025-4312.htmlWed, 17 Jun 2026 09:33:00 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit hashttps://patchthecve.com/cve/CVE-2024-8217.htmlhttps://patchthecve.com/cve/CVE-2024-8217.htmlWed, 17 Jun 2026 08:22:08 +0000HIGH 7.3: A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-4946.htmlhttps://patchthecve.com/cve/CVE-2024-4946.htmlWed, 17 Jun 2026 08:03:15 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin/adminHome.php. The manipulation of the argument sliderpic leads to unrestricted upload. The attack can https://patchthecve.com/cve/CVE-2024-4349.htmlhttps://patchthecve.com/cve/CVE-2024-4349.htmlWed, 17 Jun 2026 08:01:43 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be launche