CVE-2025-46154

Foxcms v1.25 is vulnerable to a SQL time injection vulnerability located in the installdb.php script. The root cause is the improper neutralization of special elements in the 🗑$_POST['dbname'] parameter. This flaw could allow an attacker to execute time-based SQL injection attacks. As a mitigatio...