CVE-2025-29181

FOXCMS = V1.25 is vulnerable to SQL Injection via $param'title' in /admin/util/Field.php...

CVE-2025-29181

creationtimestamp| type| source ---|---|--- 2025-04-17 18:54:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqyoj7v2q 2025-04-17 20:30:14+00:00| seen| https://t.me/cvedetector/23244...

CVE-2025-29181

FOXCMS versions prior to V1.25 are vulnerable to SQL Injection due to a lack of validation on external input for the $param['title'] parameter in the /admin/util/Field.php file. An attacker can exploit this vulnerability to execute illegal SQL commands and steal sensitive database data . As of th...

CVE-2025-29181

FOXCMS = V1.25 is vulnerable to SQL Injection via $param'title' in /admin/util/Field.php...