Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-45240

foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.

Published

2025-05-05T17:18:49.733

Last Modified

2025-06-12T17:44:27.277

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	qianfox	foxcms	1.2.5	Yes

References

https://gist.github.com/chao112122/648033972709fb50b3c89363cd64a9a4 Exploit, Third Party Advisory ([email protected])
https://gitee.com/qianfox/foxcms Product ([email protected])