https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-43163.htmlhttps://patchthecve.com/cve/CVE-2022-43163.htmlWed, 17 Jun 2026 05:05:59 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/view_client.php.https://patchthecve.com/cve/CVE-2022-43162.htmlhttps://patchthecve.com/cve/CVE-2022-43162.htmlWed, 17 Jun 2026 05:05:59 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/view_test.php.https://patchthecve.com/cve/CVE-2022-43135.htmlhttps://patchthecve.com/cve/CVE-2022-43135.htmlWed, 17 Jun 2026 05:05:57 +0000CRITICAL 9.8: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php.https://patchthecve.com/cve/CVE-2022-43058.htmlhttps://patchthecve.com/cve/CVE-2022-43058.htmlWed, 17 Jun 2026 05:05:51 +0000CRITICAL 9.8: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.https://patchthecve.com/cve/CVE-2022-43052.htmlhttps://patchthecve.com/cve/CVE-2022-43052.htmlWed, 17 Jun 2026 05:05:51 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete.https://patchthecve.com/cve/CVE-2022-43051.htmlhttps://patchthecve.com/cve/CVE-2022-43051.htmlWed, 17 Jun 2026 05:05:51 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Users.php?f=delete_test.https://patchthecve.com/cve/CVE-2022-43063.htmlhttps://patchthecve.com/cve/CVE-2022-43063.htmlWed, 17 Jun 2026 05:05:51 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Users.php?f=delete_client.https://patchthecve.com/cve/CVE-2022-43062.htmlhttps://patchthecve.com/cve/CVE-2022-43062.htmlWed, 17 Jun 2026 05:05:51 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_appointment.https://patchthecve.com/cve/CVE-2022-43127.htmlhttps://patchthecve.com/cve/CVE-2022-43127.htmlWed, 17 Jun 2026 05:05:57 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php.https://patchthecve.com/cve/CVE-2022-43126.htmlhttps://patchthecve.com/cve/CVE-2022-43126.htmlWed, 17 Jun 2026 05:05:57 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php.https://patchthecve.com/cve/CVE-2022-43125.htmlhttps://patchthecve.com/cve/CVE-2022-43125.htmlWed, 17 Jun 2026 05:05:57 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.php.https://patchthecve.com/cve/CVE-2022-43124.htmlhttps://patchthecve.com/cve/CVE-2022-43124.htmlWed, 17 Jun 2026 05:05:57 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.https://patchthecve.com/cve/CVE-2022-42064.htmlhttps://patchthecve.com/cve/CVE-2022-42064.htmlWed, 17 Jun 2026 05:04:17 +0000CRITICAL 9.8: Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.https://patchthecve.com/cve/CVE-2022-41534.htmlhttps://patchthecve.com/cve/CVE-2022-41534.htmlWed, 17 Jun 2026 05:03:20 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-41533.htmlhttps://patchthecve.com/cve/CVE-2022-41533.htmlWed, 17 Jun 2026 05:03:19 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-42074.htmlhttps://patchthecve.com/cve/CVE-2022-42074.htmlWed, 17 Jun 2026 05:04:18 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.https://patchthecve.com/cve/CVE-2022-42073.htmlhttps://patchthecve.com/cve/CVE-2022-42073.htmlWed, 17 Jun 2026 05:04:18 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=.https://patchthecve.com/cve/CVE-2022-41513.htmlhttps://patchthecve.com/cve/CVE-2022-41513.htmlWed, 17 Jun 2026 05:03:17 +0000HIGH 7.2: Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php.https://patchthecve.com/cve/CVE-2022-41512.htmlhttps://patchthecve.com/cve/CVE-2022-41512.htmlWed, 17 Jun 2026 05:03:17 +0000HIGH 7.2: An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-37152.htmlhttps://patchthecve.com/cve/CVE-2022-37152.htmlWed, 17 Jun 2026 04:54:40 +0000CRITICAL 9.8: An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/classes/Users.php?f=save_client"https://patchthecve.com/cve/CVE-2022-37151.htmlhttps://patchthecve.com/cve/CVE-2022-37151.htmlWed, 17 Jun 2026 04:54:40 +0000HIGH 7.5: There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0.https://patchthecve.com/cve/CVE-2022-37150.htmlhttps://patchthecve.com/cve/CVE-2022-37150.htmlWed, 17 Jun 2026 04:54:40 +0000MEDIUM 5.4: An issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS vulnerability via firstname, address, middlename, lastname , gender, email, contact parameters.