FoxCMS SQL Injection Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A SQL injection vulnerability has been identified in FoxCMS versions through 1.2.6. This vulnerability allows remote attackers to execute arbitrary code by manipulating the 'id' parameter in the 'DataBackup.php' file.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the server.
Added: Sep 3, 2025, 4:19 PM
Updated: Sep 3, 2025, 8:35 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
0.5threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.