high8.4
CVE-2025-46154
Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.
Impact
Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxcms | Foxcms | Version 1.25 |