Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The url_prefix, domain, and my_website POST parameters are directly concatenated into SQL statements without filtering.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FoxCMS 安全漏洞
Vulnerability Description
FoxCMS是中国黔狐（FoxCMS）公司的一套可免费商用开源的内容管理系统。 FoxCMS 1.25及之前版本存在安全漏洞，该漏洞源于installdb.php文件对url_prefix、domain和my_website参数过滤不足，可能导致SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A