https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-5671.htmlhttps://patchthecve.com/cve/CVE-2015-5671.htmlWed, 17 Jun 2026 00:29:34 +0000MEDIUM 5.0: Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access restrictions and read arbitrary uploaded files via unspecified vectors.https://patchthecve.com/cve/CVE-2015-5670.htmlhttps://patchthecve.com/cve/CVE-2015-5670.htmlWed, 17 Jun 2026 00:29:34 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2015-5669.htmlhttps://patchthecve.com/cve/CVE-2015-5669.htmlWed, 17 Jun 2026 00:29:34 +0000MEDIUM 6.5: Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors.https://patchthecve.com/cve/CVE-2015-5668.htmlhttps://patchthecve.com/cve/CVE-2015-5668.htmlWed, 17 Jun 2026 00:29:34 +0000HIGH 7.5: SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.