https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-3834.htmlhttps://patchthecve.com/cve/CVE-2005-3834.htmlTue, 16 Jun 2026 22:17:43 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.https://patchthecve.com/cve/CVE-2005-3833.htmlhttps://patchthecve.com/cve/CVE-2005-3833.htmlTue, 16 Jun 2026 22:17:43 +0000HIGH 7.5: SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the song_id parameter.https://patchthecve.com/cve/CVE-2004-2349.htmlhttps://patchthecve.com/cve/CVE-2004-2349.htmlTue, 16 Jun 2026 22:09:29 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries.