PatchTheCVE: heybbs projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-25006: Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a rhttps://patchthecve.com/cve/CVE-2020-25006.htmlhttps://patchthecve.com/cve/CVE-2020-25006.htmlWed, 17 Jun 2026 03:06:13 +0000CRITICAL 9.8: Heybbs v1.2 has a SQL injection vulnerability in login.php file via the username parameter which may allow a remote attacker to execute arbitrary code.CVE-2020-25005: Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote athttps://patchthecve.com/cve/CVE-2020-25005.htmlhttps://patchthecve.com/cve/CVE-2020-25005.htmlWed, 17 Jun 2026 03:06:13 +0000CRITICAL 9.8: Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.CVE-2020-25004: Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote ahttps://patchthecve.com/cve/CVE-2020-25004.htmlhttps://patchthecve.com/cve/CVE-2020-25004.htmlWed, 17 Jun 2026 03:06:13 +0000CRITICAL 9.8: Heybbs v1.2 has a SQL injection vulnerability in user.php file via the ID parameter which may allow a remote attacker to execute arbitrary code.