https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-0914.htmlhttps://patchthecve.com/cve/CVE-2015-0914.htmlWed, 17 Jun 2026 00:21:08 +0000MEDIUM 5.0: EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.https://patchthecve.com/cve/CVE-2015-0913.htmlhttps://patchthecve.com/cve/CVE-2015-0913.htmlWed, 17 Jun 2026 00:21:08 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2015-0912.htmlhttps://patchthecve.com/cve/CVE-2015-0912.htmlWed, 17 Jun 2026 00:21:08 +0000MEDIUM 6.5: EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.