Vendors / qianfox Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now qianfox records in CISA KEV No qianfox vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 78
foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00685 · Published 2025-05-05 · No fix listed CWE-22
Priority HIGH 66
An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows attackers to execute arbitrary code via uploading a crafted template file.
CVSS 3.1 MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.00323 · Published 2025-07-14 · No fix listed CWE-77
Priority MEDIUM 63
An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00729 · Published 2025-05-05 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was found in qianfox FoxCMS up to 1.2.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00343 · Published 2025-10-05 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in qianfox FoxCMS up to 1.2.5.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00473 · Published 2025-07-14 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00463 · Published 2025-06-15 · No fix listed CWE-74
Priority LOW 37
A vulnerability classified as critical was found in FoxCMS up to 1.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00629 · Published 2024-12-23 · No fix listed CWE-266
Priority LOW 31
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00312 · Published 2025-05-05 · No fix listed CWE-89
Priority LOW 25
A vulnerability classified as critical has been found in FoxCMS up to 1.2.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00747 · Published 2024-12-23 · No fix listed CWE-74
Priority LOW 24
A vulnerability was found in FoxCMS 1.25 and classified as problematic.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2025-03-23 · No fix listed CWE-266
Open these records in search → All records by CVSS severity
1 0 13 0 0
THREATIST.IORead the docs