https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-25239.htmlhttps://patchthecve.com/cve/CVE-2024-25239.htmlWed, 17 Jun 2026 07:15:45 +0000CRITICAL 9.8: SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyee_akpoly/Account/login.php.https://patchthecve.com/cve/CVE-2024-28595.htmlhttps://patchthecve.com/cve/CVE-2024-28595.htmlWed, 17 Jun 2026 07:21:34 +0000CRITICAL 9.8: SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the admin_id parameter in update-admin.php.https://patchthecve.com/cve/CVE-2024-2394.htmlhttps://patchthecve.com/cve/CVE-2024-2394.htmlWed, 17 Jun 2026 07:24:26 +0000MEDIUM 4.7: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched remotely.https://patchthecve.com/cve/CVE-2024-25325.htmlhttps://patchthecve.com/cve/CVE-2024-25325.htmlWed, 17 Jun 2026 07:15:52 +0000HIGH 7.1: SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php.https://patchthecve.com/cve/CVE-2024-1928.htmlhttps://patchthecve.com/cve/CVE-2024-1928.htmlWed, 17 Jun 2026 07:05:25 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname leads https://patchthecve.com/cve/CVE-2024-1927.htmlhttps://patchthecve.com/cve/CVE-2024-1927.htmlWed, 17 Jun 2026 07:05:25 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched remotelyhttps://patchthecve.com/cve/CVE-2024-1833.htmlhttps://patchthecve.com/cve/CVE-2024-1833.htmlWed, 17 Jun 2026 07:05:06 +0000HIGH 7.3: A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Account/login.php. The manipulation of the argument txtusername/txtphone leads to sql injection. The attack may be launched remotel