CVE-2025-46154

Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...

CVE-2025-46154

Foxcms v1.25 contains a SQL time injection in installdb.php via the $_POST['dbname'] parameter, enabling likely remote exploitation with high impact (CWE-style: SQL injection; CVSS v3.1 base score 8.4, LOCAL/vector L, no user interaction, high confidentiality/ integrity/ availability impact). The...