Home

Description

SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and the operation on the parameter id.

PUBLISHED Reserved 2025-08-17 | Published 2025-09-03 | Updated 2025-09-03 | Assigner mitre

References

www.yuque.com/...en=dU5eQpE4j6zEmVuK&source=doc_collaborator

cve.org (CVE-2025-56435)

nvd.nist.gov (CVE-2025-56435)

Download JSON