CVE-2025-50692

Description

References

• gist.github.com/cyb3res3c/ceacf7d560d2c8cd5ffd158abf0bfba9 · Exploit
• reference1.example.com/index.php/admin/template_file/editFile.html · Broken Link

Mais vulnerabilidades de foxcms

• CVE-2025-12920MÉDIO 4.8A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controll…
• CVE-2025-10251CRÍTICO 9.8A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images…
• CVE-2025-56630ALTO 7.3FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
• CVE-2025-56435MÉDIO 5.3SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and…
• CVE-2025-55422ALTO 8.8In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.