https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65354.htmlhttps://patchthecve.com/cve/CVE-2025-65354.htmlWed, 17 Jun 2026 09:55:39 +0000CRITICAL 9.8: Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend comprohttps://patchthecve.com/cve/CVE-2024-58316.htmlhttps://patchthecve.com/cve/CVE-2024-58316.htmlWed, 17 Jun 2026 08:14:50 +0000HIGH 7.5: Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database infohttps://patchthecve.com/cve/CVE-2025-56243.htmlhttps://patchthecve.com/cve/CVE-2025-56243.htmlWed, 17 Jun 2026 09:42:28 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the event_id GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into thhttps://patchthecve.com/cve/CVE-2025-51972.htmlhttps://patchthecve.com/cve/CVE-2025-51972.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.5: A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.https://patchthecve.com/cve/CVE-2025-51971.htmlhttps://patchthecve.com/cve/CVE-2025-51971.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 5.4: A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to injechttps://patchthecve.com/cve/CVE-2025-51969.htmlhttps://patchthecve.com/cve/CVE-2025-51969.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.5: A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET parameter, which is not properly validated before being included in a SQL statement.https://patchthecve.com/cve/CVE-2025-51968.htmlhttps://patchthecve.com/cve/CVE-2025-51968.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.5: A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions.https://patchthecve.com/cve/CVE-2025-51970.htmlhttps://patchthecve.com/cve/CVE-2025-51970.htmlWed, 17 Jun 2026 09:35:54 +0000HIGH 7.7: A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.