https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-29390.htmlhttps://patchthecve.com/cve/CVE-2025-29390.htmlWed, 17 Jun 2026 09:05:20 +0000HIGH 8.8: jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application/controllers/home.php.https://patchthecve.com/cve/CVE-2024-42565.htmlhttps://patchthecve.com/cve/CVE-2024-42565.htmlWed, 17 Jun 2026 07:49:39 +0000CRITICAL 9.8: ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete.https://patchthecve.com/cve/CVE-2024-42564.htmlhttps://patchthecve.com/cve/CVE-2024-42564.htmlWed, 17 Jun 2026 07:49:39 +0000HIGH 7.6: ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete.https://patchthecve.com/cve/CVE-2024-42563.htmlhttps://patchthecve.com/cve/CVE-2024-42563.htmlWed, 17 Jun 2026 07:49:39 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in ERP commit 44bd04 allows attackers to execute arbitrary code via uploading a crafted HTML file.