Approved changes feed: RSS · Atom
cpe:2.3:a:foxcms:foxcms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Foxcms (4667070d-71d2-5611-9635-e02160a5573f) |
|---|---|
| Product | Foxcms (71ff5bd8-3a56-5768-b77f-9aa431863cab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-56630 |
vulnerable | 2026-06-08 07:33:15.673560 |
Details available
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
Published: 2025-09-08T00:00:00.000Z
Updated: 2025-09-08T14:44:27.422Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-56435 |
vulnerable | 2026-06-08 07:33:15.630054 |
Details available
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and the operation on the parameter id.
Published: 2025-09-03T00:00:00.000Z
Updated: 2025-09-03T20:03:55.308Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50692 |
vulnerable | 2026-06-08 07:31:11.041044 |
Details available
FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
Published: 2025-08-07T00:00:00.000Z
Updated: 2025-08-08T18:40:43.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29306 |
vulnerable | 2026-06-08 07:14:56.400660 |
Details available
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
Published: 2025-03-27T00:00:00.000Z
Updated: 2025-03-28T15:29:51.703Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29181 |
vulnerable | 2026-06-08 07:14:56.371021 |
Details available
FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.
Published: 2025-04-17T00:00:00.000Z
Updated: 2025-04-17T19:13:55.745Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29180 |
vulnerable | 2026-06-08 07:14:56.370671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12920 |
vulnerable | 2026-06-08 07:04:31.202548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10251 |
vulnerable | 2026-06-08 07:02:26.509875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.