Yejiao

yejiao

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-26301 1Yejiao 1Tuzicms Jun 17, 2026 Mar 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php.
CVE-2021-44349 1Yejiao 1Tuzicms Jun 17, 2026 Dec 3, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php.
CVE-2021-44348 1Yejiao 1Tuzicms Jun 17, 2026 Dec 3, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php.
CVE-2021-44347 1Yejiao 1Tuzicms Jun 17, 2026 Dec 3, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php.
CVE-2019-16642 1Yejiao 1Tuzicms Jun 17, 2026 Sep 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.