16 matches found
EUVD-2025-13452
Malicious code in bioql PyPI...
CVE-2025-56435
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and the operation on the parameter id...
FoxCMS security vulnerabilities
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS v1.2.6 and earlier versions, which originates from the incorrect operation of the parameter id in the file /DataBackup.php leading to SQL injection...
CVE-2025-56435
FoxCMS versions v1.2.6 and before are vulnerable to a SQL Injection flaw. The root cause is the incorrect handling of the id parameter within the DataBackup.php file, specifically in the restore method under the apparin estore route (referenced as /DataBackup.php in multiple sources). An attack...
PT-2025-35784
Name of the Vulnerable Software and Affected Versions: FoxCMS versions prior to 1.2.6 Description: FoxCMS is susceptible to a SQL Injection issue in versions prior to 1.2.6. This allows a remote attacker to potentially execute arbitrary code through the /DataBackup.php file by manipulating the id...
CVE-2025-56435: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and the operation on the parameter id...
CVE-2025-45240
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php...
CVE-2025-45240
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php...
CVE-2025-45239
An issue in the restores method DataBackup.php of foxcms v2.0.6 allows attackers to execute a directory traversal...
PT-2025-19754 · Foxcms · Foxcms
Name of the Vulnerable Software and Affected Versions: foxcms version 2.0.6 Description: An issue in the restores method of DataBackup.php allows attackers to execute a directory traversal. Recommendations: For foxcms version 2.0.6, consider restricting access to the restores method in...
CVE-2025-45240
The foxcms content management system, specifically version 1.2.5 , is vulnerable to a SQL injection vulnerability. The flaw resides in the executeCommand method within the DataBackup.php file due to improper handling of input. This could allow an attacker to perform SQL injection attacks against ...
CVE-2025-45240: Improper Neutralization of Special Elements used in an SQL Command
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php...
CVE-2025-45239: Improper Limitation of a Pathname to a Restricted Directory
An issue in the restores method DataBackup.php of foxcms v2.0.6 allows attackers to execute a directory traversal...
CVE-2025-45240
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php...
PT-2025-19729 · Foxcms · Foxcms
Name of the Vulnerable Software and Affected Versions: foxcms version 1.2.5 Description: The issue is a SQL injection vulnerability via the executeCommand method in DataBackup.php. This vulnerability allows for potential SQL injection attacks. Recommendations: For foxcms version 1.2.5, consider...