https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13771.htmlhttps://patchthecve.com/cve/CVE-2025-13771.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.5: WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2025-13770.htmlhttps://patchthecve.com/cve/CVE-2025-13770.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.5: WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.https://patchthecve.com/cve/CVE-2025-13769.htmlhttps://patchthecve.com/cve/CVE-2025-13769.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.5: WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.https://patchthecve.com/cve/CVE-2025-13768.htmlhttps://patchthecve.com/cve/CVE-2025-13768.htmlThu, 08 Oct 2026 10:10:00 +0000HIGH 7.5: WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.https://patchthecve.com/cve/CVE-2025-9259.htmlhttps://patchthecve.com/cve/CVE-2025-9259.htmlWed, 17 Jun 2026 10:08:38 +0000MEDIUM 6.5: WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2025-9258.htmlhttps://patchthecve.com/cve/CVE-2025-9258.htmlWed, 17 Jun 2026 10:08:38 +0000MEDIUM 6.5: WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2025-9257.htmlhttps://patchthecve.com/cve/CVE-2025-9257.htmlWed, 17 Jun 2026 10:08:38 +0000MEDIUM 6.5: WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2025-9256.htmlhttps://patchthecve.com/cve/CVE-2025-9256.htmlWed, 17 Jun 2026 10:08:37 +0000MEDIUM 6.5: WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.https://patchthecve.com/cve/CVE-2025-9255.htmlhttps://patchthecve.com/cve/CVE-2025-9255.htmlWed, 17 Jun 2026 10:08:37 +0000HIGH 7.5: WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.https://patchthecve.com/cve/CVE-2025-9254.htmlhttps://patchthecve.com/cve/CVE-2025-9254.htmlWed, 17 Jun 2026 10:08:37 +0000CRITICAL 9.8: WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.https://patchthecve.com/cve/CVE-2024-8586.htmlhttps://patchthecve.com/cve/CVE-2024-8586.htmlWed, 17 Jun 2026 08:22:54 +0000MEDIUM 6.1: WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulnerability to forge URLs. Users, believing they are accessing a trusted domain, can be redirected to another page, potentially leading to phishing attacks.