PatchTheCVE: luocms projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-24609: Luocms v2.0 is affected by an incorrect access control vulnerabilityhttps://patchthecve.com/cve/CVE-2022-24609.htmlhttps://patchthecve.com/cve/CVE-2022-24609.htmlWed, 17 Jun 2026 04:32:11 +0000CRITICAL 9.8: Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/template_manage.php, an attacker can write an arbitrary shell file.CVE-2022-24608: Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.https://patchthecve.com/cve/CVE-2022-24608.htmlhttps://patchthecve.com/cve/CVE-2022-24608.htmlWed, 17 Jun 2026 04:32:10 +0000MEDIUM 6.1: Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.CVE-2022-24607: Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.https://patchthecve.com/cve/CVE-2022-24607.htmlhttps://patchthecve.com/cve/CVE-2022-24607.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.CVE-2022-24606: Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.https://patchthecve.com/cve/CVE-2022-24606.htmlhttps://patchthecve.com/cve/CVE-2022-24606.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.CVE-2022-24605: Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.https://patchthecve.com/cve/CVE-2022-24605.htmlhttps://patchthecve.com/cve/CVE-2022-24605.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.CVE-2022-24604: Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.https://patchthecve.com/cve/CVE-2022-24604.htmlhttps://patchthecve.com/cve/CVE-2022-24604.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.CVE-2022-24603: Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.https://patchthecve.com/cve/CVE-2022-24603.htmlhttps://patchthecve.com/cve/CVE-2022-24603.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.CVE-2022-24602: Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.https://patchthecve.com/cve/CVE-2022-24602.htmlhttps://patchthecve.com/cve/CVE-2022-24602.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.CVE-2022-24601: Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.phphttps://patchthecve.com/cve/CVE-2022-24601.htmlhttps://patchthecve.com/cve/CVE-2022-24601.htmlWed, 17 Jun 2026 04:32:10 +0000HIGH 7.5: Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain sensitive information through SQL injection statements.CVE-2022-24600: Luocms v2.0 is affected by SQL Injection through /admin/login.phphttps://patchthecve.com/cve/CVE-2022-24600.htmlhttps://patchthecve.com/cve/CVE-2022-24600.htmlWed, 17 Jun 2026 04:32:10 +0000CRITICAL 9.8: Luocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the background through SQL injection statements.