Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-28397

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00224EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.4 views

PT-2025-37181

Name of the Vulnerable Software and Affected Versions: FoxCMS versions prior to 1.24 Description: A SQL injection issue exists in FoxCMS due to the manipulation of the ids argument within the batchCope function located in the /app/admin/controller/Images.php file. This allows for remote...

6.5CVSS6.6AI score0.00066EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/07/16 4:18 a.m.3 views

CVE-2025-7568

A vulnerability was found in qianfox FoxCMS up to 1.2.5. It has been classified as critical. Affected is the function batchCope of the file app/admin/controller/Video.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

8.8CVSS6.7AI score0.00216EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/07/14 3:32 a.m.7 views

CVE-2025-7568 qianfox FoxCMS Video.php batchCope sql injection

A vulnerability was found in qianfox FoxCMS up to 1.2.5. It has been classified as critical. Affected is the function batchCope of the file app/admin/controller/Video.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

6.5CVSS0.00216EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/06/17 11:12 p.m.6 views

CVE-2025-6094

A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the function batchCope of the file app/admin/controller/Download.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit...

8.8CVSS6.7AI score0.00216EPSS
Exploits1References1
CVE
CVE
added 2025/06/15 10:31 p.m.49 views

CVE-2025-6094

FoxCMS (versions up to 1.2.5) contains a SQL injection in the batchCope function of app/admin/controller/Download.php, triggered by manipulating the ids parameter. The vulnerability allows remote exploitation and has publicly disclosed exploits. Publicly available advisories (e.g., PT-2025-25506)...

8.8CVSS6.7AI score0.00216EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/15 12:0 a.m.2 views

PT-2025-25506 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS versions 1.2.5 and earlier Description: A critical issue has been found in FoxCMS, affecting the batchCope function of the file app/admin/controller/Download.php. The manipulation of the ids argument leads to SQL injection. The attack...

8.8CVSS6.8AI score0.00216EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/05/25 12:0 a.m.2 views

PT-2025-22867 · Qianfox · Foxcms

Name of the Vulnerable Software and Affected Versions: qianfox FoxCMS version 1.2.5 Description: A critical issue has been found in the batchCope function of the app/admin/controller/Article.php file. The manipulation of the ids argument leads to SQL injection. This issue can be exploited remotel...

8.8CVSS6.7AI score0.00224EPSS
Exploits1References11
Rows per page
Query Builder