https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1198.htmlhttps://patchthecve.com/cve/CVE-2024-1198.htmlWed, 17 Jun 2026 07:03:41 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserialization. It is possible to launch the attack https://patchthecve.com/cve/CVE-2024-1117.htmlhttps://patchthecve.com/cve/CVE-2024-1117.htmlWed, 17 Jun 2026 07:03:28 +0000HIGH 7.3: A vulnerability was found in openBI up to 1.0.8. It has been declared as critical. Affected by this vulnerability is the function index of the file /application/index/controller/Screen.php. The manipulation of the argument fileurl leads to code injection. The attack can be launched remotely. The exphttps://patchthecve.com/cve/CVE-2024-1116.htmlhttps://patchthecve.com/cve/CVE-2024-1116.htmlWed, 17 Jun 2026 07:03:28 +0000HIGH 7.3: A vulnerability was found in openBI up to 1.0.8. It has been classified as critical. Affected is the function index of the file /application/plugins/controller/Upload.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to thttps://patchthecve.com/cve/CVE-2024-1115.htmlhttps://patchthecve.com/cve/CVE-2024-1115.htmlWed, 17 Jun 2026 07:03:28 +0000HIGH 7.3: A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2024-1114.htmlhttps://patchthecve.com/cve/CVE-2024-1114.htmlWed, 17 Jun 2026 07:03:28 +0000MEDIUM 6.5: A vulnerability has been found in openBI up to 1.0.8 and classified as critical. This vulnerability affects the function dlfile of the file /application/index/controller/Screen.php. The manipulation of the argument fileUrl leads to improper access controls. The attack can be initiated remotely. The https://patchthecve.com/cve/CVE-2024-1113.htmlhttps://patchthecve.com/cve/CVE-2024-1113.htmlWed, 17 Jun 2026 07:03:28 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in openBI up to 1.0.8. This affects the function uploadUnity of the file /application/index/controller/Unity.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The explohttps://patchthecve.com/cve/CVE-2024-1036.htmlhttps://patchthecve.com/cve/CVE-2024-1036.htmlWed, 17 Jun 2026 07:03:17 +0000HIGH 7.3: A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function uploadIcon of the file /application/index/controller/Screen.php of the component Icon Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit