Filtered by vendor Qianfox Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-45240 1 Qianfox 1 Foxcms 2025-06-12 6.5 Medium
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.
CVE-2025-45238 1 Qianfox 1 Foxcms 2025-06-12 9.1 Critical
foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.
CVE-2025-45239 1 Qianfox 1 Foxcms 2025-06-12 5.3 Medium
An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.