Description
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The url_prefix, domain, and my_website POST parameters are directly concatenated into SQL statements without filtering.
High · 7.2
CVE-2025-29180
EUVD-2025-11560GHSA-q8hq-xhpc-vm95
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The url_prefix, domain, and my_website POST …
Published Apr 17, 2025 · Updated Apr 17, 2025 · Assigned by mitre