https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-46999.htmlhttps://patchthecve.com/cve/CVE-2022-46999.htmlWed, 17 Jun 2026 05:12:45 +0000CRITICAL 9.8: Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php.https://patchthecve.com/cve/CVE-2023-0244.htmlhttps://patchthecve.com/cve/CVE-2023-0244.htmlWed, 17 Jun 2026 05:25:06 +0000MEDIUM 6.3: A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2023-0243.htmlhttps://patchthecve.com/cve/CVE-2023-0243.htmlWed, 17 Jun 2026 05:25:06 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remhttps://patchthecve.com/cve/CVE-2022-23882.htmlhttps://patchthecve.com/cve/CVE-2022-23882.htmlWed, 17 Jun 2026 04:30:55 +0000CRITICAL 9.8: TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php.https://patchthecve.com/cve/CVE-2022-26301.htmlhttps://patchthecve.com/cve/CVE-2022-26301.htmlWed, 17 Jun 2026 04:34:56 +0000CRITICAL 9.8: TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php.