CVE-2025-56630

FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the columnmodel parameter in the app/admin/controller/Column.php file...

FoxCMS security vulnerabilities

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS v1.2.5 and earlier versions, which originates from SQL injection of columnmodel parameter in app/admin/controller/Column.php file...

CVE-2025-56630: Improper Neutralization of Special Elements used in an SQL Command

FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the columnmodel parameter in the app/admin/controller/Column.php file...