https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0989.htmlhttps://patchthecve.com/cve/CVE-2024-0989.htmlWed, 17 Jun 2026 06:54:42 +0000MEDIUM 5.4: A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function del_sn_db of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. Thhttps://patchthecve.com/cve/CVE-2024-0988.htmlhttps://patchthecve.com/cve/CVE-2024-0988.htmlWed, 17 Jun 2026 06:54:42 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument App_User_id/App_user_Token leads to improper authentication. The explhttps://patchthecve.com/cve/CVE-2024-0987.htmlhttps://patchthecve.com/cve/CVE-2024-0987.htmlWed, 17 Jun 2026 06:54:42 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identif