Approved changes feed: RSS · Atom

cpe:2.3:a:foxcms:foxcms:1.2.5:*:*:*:*:*:*:*

part: a version: 1.2.5 update: *

VendorFoxcms (4667070d-71d2-5611-9635-e02160a5573f)
ProductFoxcms (71ff5bd8-3a56-5768-b77f-9aa431863cab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5155 vulnerable 2026-06-08 07:35:24.290281 qianfox FoxCMS Article.php batchCope sql injection
MEDIUM (6.3)
A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/admin/controller/Article.php. The manipulation of the argument ids leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-05-25T19:31:04.323Z
Updated: 2025-05-27T14:14:40.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25790 vulnerable 2026-06-08 07:12:51.354382 Details available
An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading a crafted Zip file.
Published: 2025-02-26T00:00:00.000Z
Updated: 2026-07-05T00:57:03.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25789 vulnerable 2026-06-08 07:12:51.353912 Details available
FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php.
Published: 2025-02-26T00:00:00.000Z
Updated: 2026-07-05T00:56:58.406Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.