CVE-2025-46154

Foxcms v1.25 is vulnerable to a SQL time injection within the installdb.php script. The vulnerability exists because the $_POST['dbname'] parameter is improperly neutralized, allowing an attacker to execute time-based SQL commands. This could lead to a high impact on confidentiality, integrity, a...