CVE-2025-46154

Foxcms v1.25 contains a SQL time injection in installdb.php via the $_POST['dbname'] parameter, enabling likely remote exploitation with high impact (CWE-style: SQL injection; CVSS v3.1 base score 8.4, LOCAL/vector L, no user interaction, high confidentiality/ integrity/ availability impact). The...