Approved changes feed: RSS · Atom

cpe:2.3:a:tuzicms:tuzicms:2.0.6:*:*:*:*:*:*:*

part: a version: 2.0.6 update: *

VendorTuzicms (40853a94-f5b6-5ee8-b33e-91f864aee6bf)
ProductTuzicms (da8a20c0-297c-51cf-9307-06f9022bbd2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/yangzming/tuzicms purl2cpe 2026-06-01 10:13:18.917351
pkg:github/yeyinshi/tuzicms purl2cpe 2026-06-01 10:13:18.917354

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46999 vulnerable 2026-06-08 05:50:39.777434 Details available
Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php.
Published: 2023-01-25T00:00:00.000Z
Updated: 2025-04-01T15:17:21.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23882 vulnerable 2026-06-08 05:40:59.298545 Details available
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php.
Published: 2022-03-28T11:50:22.000Z
Updated: 2024-08-03T03:51:46.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16659 vulnerable 2026-06-08 05:13:09.108402 Details available
TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.
Published: 2019-09-21T17:02:05.000Z
Updated: 2024-08-05T01:17:41.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16658 vulnerable 2026-06-08 05:13:09.108109 Details available
TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.
Published: 2019-09-21T17:02:13.000Z
Updated: 2024-08-05T01:17:41.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16657 vulnerable 2026-06-08 05:13:09.107676 Details available
TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.
Published: 2019-09-21T17:02:24.000Z
Updated: 2024-08-05T01:17:41.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16644 vulnerable 2026-06-08 05:13:08.618008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10185 vulnerable 2026-06-08 05:10:26.411588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.