https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0729.htmlhttps://patchthecve.com/cve/CVE-2024-0729.htmlWed, 17 Jun 2026 06:54:07 +0000MEDIUM 5.5: A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Affected by this issue is some unknown functionality of the file cms_admin.php. The manipulation of the argument a_name leads to sql injection. The exploit has been disclosed to the public and may be usedhttps://patchthecve.com/cve/CVE-2024-0728.htmlhttps://patchthecve.com/cve/CVE-2024-0728.htmlWed, 17 Jun 2026 06:54:07 +0000MEDIUM 4.7: A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument c_cmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclosedhttps://patchthecve.com/cve/CVE-2024-0426.htmlhttps://patchthecve.com/cve/CVE-2024-0426.htmlWed, 17 Jun 2026 06:53:29 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cms_template.php. The manipulation of the argument t_name/t_path leads to sql injection. The attack may be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2024-0425.htmlhttps://patchthecve.com/cve/CVE-2024-0425.htmlWed, 17 Jun 2026 06:53:28 +0000MEDIUM 5.3: A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_admin_psw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publihttps://patchthecve.com/cve/CVE-2023-5259.htmlhttps://patchthecve.com/cve/CVE-2023-5259.htmlWed, 17 Jun 2026 06:48:11 +0000LOW 2.7: A vulnerability classified as problematic was found in ForU CMS. This vulnerability affects unknown code of the file /admin/cms_admin.php. The manipulation of the argument del leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be ushttps://patchthecve.com/cve/CVE-2023-5221.htmlhttps://patchthecve.com/cve/CVE-2023-5221.htmlWed, 17 Jun 2026 06:48:06 +0000MEDIUM 4.7: A vulnerability classified as critical has been found in ForU CMS. This affects an unknown part of the file /install/index.php. The manipulation of the argument db_name leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be us