https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-25697.htmlhttps://patchthecve.com/cve/CVE-2019-25697.htmlWed, 17 Jun 2026 02:32:59 +0000HIGH 8.2: CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter. Attackers can send GET requests to category.php with malicious cat_id values to extract sensitive database information includinhttps://patchthecve.com/cve/CVE-2019-25682.htmlhttps://patchthecve.com/cve/CVE-2019-25682.htmlFri, 24 Jul 2026 22:10:00 +0000MEDIUM 4.3: CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms. Attackers can trick authenticated administrators into visiting crafted pages that submit POST requests to the users.php endpoint withhttps://patchthecve.com/cve/CVE-2019-25674.htmlhttps://patchthecve.com/cve/CVE-2019-25674.htmlFri, 24 Jul 2026 22:10:00 +0000HIGH 8.2: CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perform t