Lucene search
+L

246 matches found

Packet Storm News
Packet Storm News
added 2025/04/17 12:0 a.m.6 views

FoxCMS 1.2.5 Remote Code Execution

FoxCMS version 1.2.5 proof of concept remote code execution exploit...

9.8CVSS8.2AI score0.45675EPSS
SaveExploits11
Cvelist
Cvelist
added 2025/04/17 12:0 a.m.24 views

CVE-2025-29181

FOXCMS = V1.25 is vulnerable to SQL Injection via $param'title' in /admin/util/Field.php...

0.00372EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 12:0 a.m.83 views

CVE-2025-29181

Summary of CVE-2025-29181 : FoxCMS is affected by a SQL Injection in the Field.php file, via the parameter $param['title'] in /admin/util/Field.php. Multiple sources indicate the issue exists in FoxCMS versions prior to or at V1.25, with the root cause being lack of input validation for the title...

7.2CVSS8.1AI score0.00372EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/29 12:31 a.m.21 views

CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

9.8CVSS8.2AI score0.45675EPSS
SaveExploits11References1
NVD
NVD
added 2025/03/27 7:15 p.m.24 views

CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

9.8CVSS0.45675EPSS
SaveExploits11References1
OSV
OSV
added 2025/03/27 7:15 p.m.11 views

CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

9.8CVSS6.1AI score0.45675EPSS
SaveExploits11References1
Positive Technologies
Positive Technologies
added 2025/03/27 12:0 a.m.8 views

PT-2025-13394

Name of the Vulnerable Software and Affected Versions FoxCMS version 1.2.5 Description An issue in FoxCMS allows a remote attacker to execute arbitrary code via the case display page in the index.html component. The vulnerability is related to a remote code execution issue. Recommendations For...

10CVSS8.1AI score0.45675EPSS
SaveExploits11References27
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.23 views

FoxCMS 代码注入漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS version 1.2.5, which originates from the index.html component that allows execution of arbitrary code...

9.8CVSS6.8AI score0.45675EPSS
SaveExploits11References3
Vulnrichment
Vulnrichment
added 2025/03/27 12:0 a.m.11 views

CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

8.1AI score0.45675EPSS
SaveExploits11References1
Cvelist
Cvelist
added 2025/03/27 12:0 a.m.22 views

CVE-2025-29306

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component...

0.45675EPSS
SaveExploits11References1
CVE
CVE
added 2025/03/27 12:0 a.m.179 views

CVE-2025-29306

FoxCMS v1.2.5 (and older) contains CVE-2025-29306, a remote code execution via the id parameter on /images/index.html caused by unsafe handling of user input (unserialize()). Unauthenticated attackers can trigger arbitrary PHP code, potentially leading to full server compromise. Affected endpoint...

9.8CVSS7.6AI score0.45675EPSS
SaveExploits11References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/25 4:18 p.m.29 views

CVE-2025-2653

A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS7.2AI score0.00303EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/03/25 8:12 a.m.136 views

Exploit for Code Injection in Foxcms

CVE-2025-29306 FOXCMS Qianhu Content Management System Servi...

9.8CVSS5.9AI score0.45675EPSS
SaveExploits11
OSV
OSV
added 2025/03/23 4:15 p.m.6 views

CVE-2025-2653

A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS4.8AI score0.00303EPSS
SaveExploits0References4
NVD
NVD
added 2025/03/23 4:15 p.m.22 views

CVE-2025-2653

A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS0.00303EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/23 3:31 p.m.19 views

CVE-2025-2653 FoxCMS improper authorization

A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS7.1AI score0.00303EPSS
SaveExploits0References4
CVE
CVE
added 2025/03/23 3:31 p.m.69 views

CVE-2025-2653

FoxCMS 1.25 is affected by CVE-2025-2653, which is described as an improper authorization vulnerability that can be exploited remotely. The connected sources consistently reference FoxCMS 1.25 and indicate a remote-attack vector with unknown details about the exact vulnerable component or entry p...

5.3CVSS4.7AI score0.00303EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/03/23 3:31 p.m.32 views

CVE-2025-2653 FoxCMS improper authorization

A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS0.00303EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/23 12:0 a.m.18 views

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS Company. A security vulnerability exists in FoxCMS version 1.25, which originates from improper authorization...

5.3CVSS4.9AI score0.00303EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/02/28 12:26 a.m.11 views

CVE-2025-25789

FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...

9.8CVSS8.3AI score0.01275EPSS
SaveExploits1References1
Rows per page
Query Builder