https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2944.htmlhttps://patchthecve.com/cve/CVE-2026-2944.htmlWed, 17 Jun 2026 10:32:05 +0000HIGH 7.3: A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results in os command injection. The attack may bhttps://patchthecve.com/cve/CVE-2026-1192.htmlhttps://patchthecve.com/cve/CVE-2026-1192.htmlWed, 17 Jun 2026 10:15:18 +0000HIGH 7.3: A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imode_alldata.php. Executing a manipulation of the argument DevId can lead to command injection. The attack can be executed remotely. The exploit https://patchthecve.com/cve/CVE-2024-7898.htmlhttps://patchthecve.com/cve/CVE-2024-7898.htmlWed, 17 Jun 2026 08:21:08 +0000HIGH 7.3: A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2024-7897.htmlhttps://patchthecve.com/cve/CVE-2024-7897.htmlWed, 17 Jun 2026 08:21:08 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This affects an unknown part of the file /cgi-bin/tosei_kikai.php. The manipulation of the argument kikaibangou leads to command injection. It is possible to initiate the attack https://patchthecve.com/cve/CVE-2024-7896.htmlhttps://patchthecve.com/cve/CVE-2024-7896.htmlWed, 17 Jun 2026 08:21:08 +0000MEDIUM 6.3: A vulnerability was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/p1_ftpserver.php. The manipulation of the argument adr_txt leads to command injection. The attack may