CVE-2025-25790

概要

参考情報

• Ka7arotto/FoxCMS · Exploit
• foxcms.cn · Product

foxcms のその他の脆弱性

• CVE-2025-12920中 4.8A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controll…
• CVE-2025-10251緊急 9.8A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images…
• CVE-2025-56630高 7.3FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
• CVE-2025-56435中 5.3SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and…
• CVE-2025-55422高 8.8In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.