Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.

Published Jun 3, 2025 · Updated Jun 3, 2025 · Assigned by mitre