https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-25441.htmlhttps://patchthecve.com/cve/CVE-2019-25441.htmlWed, 17 Jun 2026 02:32:22 +0000CRITICAL 9.8: thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_command endpoint. Attackers can send POST requests with shell commands in the command parameter to execute arbitrary code on thhttps://patchthecve.com/cve/CVE-2019-25347.htmlhttps://patchthecve.com/cve/CVE-2019-25347.htmlWed, 17 Jun 2026 02:32:08 +0000HIGH 7.5: thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts.https://patchthecve.com/cve/CVE-2019-25346.htmlhttps://patchthecve.com/cve/CVE-2019-25346.htmlWed, 17 Jun 2026 02:32:07 +0000HIGH 7.5: TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information.https://patchthecve.com/cve/CVE-2019-25311.htmlhttps://patchthecve.com/cve/CVE-2019-25311.htmlWed, 17 Jun 2026 02:32:02 +0000MEDIUM 6.4: thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields. Attackers can submit crafted script payloads in operating_system, system_owner, system_username, system_password, system_descrip