Approved changes feed: RSS · Atom

cpe:2.3:a:yejiao:tuzicms:2.0.6:*:*:*:*:*:*:*

part: a version: 2.0.6 update: *

VendorYejiao (a4911e75-37e0-50bc-91b6-b35b3606fe5c)
ProductTuzicms (5a236f69-e114-5e8e-89e1-a6be0d44895c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/yangzming/tuzicms purl2cpe 2026-06-01 10:15:01.789875
pkg:github/yeyinshi/tuzicms purl2cpe 2026-06-01 10:15:01.789878

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26301 vulnerable 2026-06-08 05:41:50.830043 Details available
TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php.
Published: 2022-03-24T21:21:50.000Z
Updated: 2024-08-03T04:56:37.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44349 vulnerable 2026-06-08 05:36:45.677283 Details available
SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php.
Published: 2021-12-03T19:05:34.000Z
Updated: 2024-08-04T04:17:25.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44348 vulnerable 2026-06-08 05:36:45.676880 Details available
SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php.
Published: 2021-12-03T19:01:46.000Z
Updated: 2024-08-04T04:17:24.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44347 vulnerable 2026-06-08 05:36:45.676281 Details available
SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php.
Published: 2021-12-03T18:55:33.000Z
Updated: 2024-08-04T04:17:24.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16642 vulnerable 2026-06-08 05:13:08.614982 Details available
App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.
Published: 2019-09-20T14:32:50.000Z
Updated: 2024-08-05T01:17:40.897Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.