CVE-2025-46154

Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...

CVE-2025-46154

Foxcms v1.25 is vulnerable to a SQL time injection within the installdb.php script. The vulnerability exists because the $_POST['dbname'] parameter is improperly neutralized, allowing an attacker to execute time-based SQL commands. This could lead to a high impact on confidentiality, integrity, a...