Qianfox

14 CVEs across 1 Qianfox products. Browse Qianfox vulnerabilities, severities, and proof-of-concept exploits.

Qianfox products with known CVEs

ProductCVEs
Foxcms14
Qianfox CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-9609Medium4.72026-05-27A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The manipulation leads to weak password rec…
CVE-2026-9608Low2.42026-05-27A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown function of the file /Tag/edit of the component Administrator…
CVE-2025-12920Low2.42025-11-09A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. Thi…
CVE-2025-11306Medium4.32025-10-05A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulatio…
CVE-2025-51650Medium5.62025-07-14An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows attackers to execute arbitrary code via uploading a…
CVE-2025-7568Medium6.32025-07-14A vulnerability was found in qianfox FoxCMS up to 1.2.5. It has been classified as critical. Affected is the function batchCope of the file app/admin/controlle…
CVE-2025-6094Medium6.32025-06-15A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the function batchCope of the file app/admi…
CVE-2025-5155Medium6.32025-05-25A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/adm…
CVE-2025-45239Medium5.32025-05-05An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.
CVE-2025-45238Critical9.12025-05-05foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.
CVE-2025-45240Medium6.52025-05-05foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.
CVE-2025-2653Medium4.32025-03-23A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to imprope…
CVE-2024-12901Medium5.32024-12-23A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controlle…
CVE-2024-12900Medium6.32024-12-23A vulnerability classified as critical has been found in FoxCMS up to 1.2. Affected is an unknown function of the file /install/installdb.php of the component…