← Database

CVE-2025-46154

HIGH CVSS: 8.4 Published: 2025-06-03 Modified: 2026-06-17

Description

Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.

Affected Platforms

Foxcms Foxcms

Weakness Type

CWE-89

References