PatchTheCVE: feminer wms projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-25997: Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive informatiohttps://patchthecve.com/cve/CVE-2025-25997.htmlhttps://patchthecve.com/cve/CVE-2025-25997.htmlWed, 17 Jun 2026 09:01:23 +0000HIGH 7.5: Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component.CVE-2025-25994: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information vihttps://patchthecve.com/cve/CVE-2025-25994.htmlhttps://patchthecve.com/cve/CVE-2025-25994.htmlWed, 17 Jun 2026 09:01:23 +0000HIGH 7.5: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id.CVE-2025-25993: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information vihttps://patchthecve.com/cve/CVE-2025-25993.htmlhttps://patchthecve.com/cve/CVE-2025-25993.htmlWed, 17 Jun 2026 09:01:23 +0000MEDIUM 5.1: SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."CVE-2025-25992: SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via thhttps://patchthecve.com/cve/CVE-2025-25992.htmlhttps://patchthecve.com/cve/CVE-2025-25992.htmlWed, 17 Jun 2026 09:01:23 +0000MEDIUM 5.1: SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php component.