https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-4556.htmlhttps://patchthecve.com/cve/CVE-2023-4556.htmlWed, 17 Jun 2026 06:38:05 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqli_query of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2023-1854.htmlhttps://patchthecve.com/cve/CVE-2023-1854.htmlWed, 17 Jun 2026 05:28:53 +0000MEDIUM 4.7: A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the phttps://patchthecve.com/cve/CVE-2023-1394.htmlhttps://patchthecve.com/cve/CVE-2023-1394.htmlWed, 17 Jun 2026 05:27:51 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqli_query of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit hhttps://patchthecve.com/cve/CVE-2023-1310.htmlhttps://patchthecve.com/cve/CVE-2023-1310.htmlWed, 17 Jun 2026 05:27:37 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. Thehttps://patchthecve.com/cve/CVE-2023-1309.htmlhttps://patchthecve.com/cve/CVE-2023-1309.htmlWed, 17 Jun 2026 05:27:36 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exhttps://patchthecve.com/cve/CVE-2023-1308.htmlhttps://patchthecve.com/cve/CVE-2023-1308.htmlWed, 17 Jun 2026 05:27:36 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2023-1293.htmlhttps://patchthecve.com/cve/CVE-2023-1293.htmlWed, 17 Jun 2026 05:27:34 +0000MEDIUM 5.0: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function mysqli_query of the file admin_cs.php. The manipulation leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. https://patchthecve.com/cve/CVE-2023-1040.htmlhttps://patchthecve.com/cve/CVE-2023-1040.htmlWed, 17 Jun 2026 05:26:57 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sql injection. The attack may be launched rhttps://patchthecve.com/cve/CVE-2022-46957.htmlhttps://patchthecve.com/cve/CVE-2022-46957.htmlWed, 17 Jun 2026 05:12:43 +0000MEDIUM 6.1: Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).https://patchthecve.com/cve/CVE-2022-46624.htmlhttps://patchthecve.com/cve/CVE-2022-46624.htmlWed, 17 Jun 2026 05:12:05 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.