https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-27927.htmlhttps://patchthecve.com/cve/CVE-2022-27927.htmlWed, 17 Jun 2026 04:37:45 +0000CRITICAL 9.8: A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.https://patchthecve.com/cve/CVE-2022-1083.htmlhttps://patchthecve.com/cve/CVE-2022-1083.htmlWed, 17 Jun 2026 04:21:47 +0000HIGH 7.3: A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injectionhttps://patchthecve.com/cve/CVE-2022-1082.htmlhttps://patchthecve.com/cve/CVE-2022-1082.htmlWed, 17 Jun 2026 04:21:47 +0000HIGH 7.3: A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated https://patchthecve.com/cve/CVE-2022-1081.htmlhttps://patchthecve.com/cve/CVE-2022-1081.htmlWed, 17 Jun 2026 04:21:47 +0000MEDIUM 4.3: A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack c