https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9476.htmlhttps://patchthecve.com/cve/CVE-2025-9476.htmlWed, 17 Jun 2026 10:09:04 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some unknown functionality of the file /Superadmin_Dashboard/process/editemployee_process.php. Such manipulation of the argument employee_file201 leads to unrestricted upload. The attackhttps://patchthecve.com/cve/CVE-2025-9475.htmlhttps://patchthecve.com/cve/CVE-2025-9475.htmlWed, 17 Jun 2026 10:09:04 +0000HIGH 7.3: A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin_Dashboard/process/editemployee_process.php. This manipulation of the argument employee_file201 causes unrestricted upload. The attack may be inhttps://patchthecve.com/cve/CVE-2024-8342.htmlhttps://patchthecve.com/cve/CVE-2024-8342.htmlWed, 17 Jun 2026 08:22:23 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Petshop Management System 1.0. This issue affects some unknown processing of the file /controllers/add_client.php. The manipulation of the argument image_profile leads to unrestricted upload. The attack may be initiahttps://patchthecve.com/cve/CVE-2024-8341.htmlhttps://patchthecve.com/cve/CVE-2024-8341.htmlWed, 17 Jun 2026 08:22:23 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/add_user.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit hashttps://patchthecve.com/cve/CVE-2024-3415.htmlhttps://patchthecve.com/cve/CVE-2024-3415.htmlWed, 17 Jun 2026 07:44:13 +0000LOW 3.5: A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file Superadmin_Dashboard/process/addbranches_process.php. The manipulation of the argument branches_name leads to cross site scripting. Ithttps://patchthecve.com/cve/CVE-2024-3414.htmlhttps://patchthecve.com/cve/CVE-2024-3414.htmlWed, 17 Jun 2026 07:44:13 +0000LOW 3.5: A vulnerability was found in SourceCodester Human Resource Information System 1.0 and classified as problematic. This issue affects some unknown processing of the file Superadmin_Dashboard/process/addcorporate_process.php. The manipulation of the argument corporate_name leads to cross site scriptinghttps://patchthecve.com/cve/CVE-2024-3413.htmlhttps://patchthecve.com/cve/CVE-2024-3413.htmlWed, 17 Jun 2026 07:44:13 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Human Resource Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file initialize/login_process.php. The manipulation of the argument hr_email/hr_password leads to sql injection. The attack can be initiathttps://patchthecve.com/cve/CVE-2024-1832.htmlhttps://patchthecve.com/cve/CVE-2024-1832.htmlWed, 17 Jun 2026 07:05:06 +0000HIGH 7.3: A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input torada%27+or+%27https://patchthecve.com/cve/CVE-2024-1831.htmlhttps://patchthecve.com/cve/CVE-2024-1831.htmlWed, 17 Jun 2026 07:05:06 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--+-