Description
FoxCMS是中国黔狐（FoxCMS）公司的一套可免费商用开源的内容管理系统。 FoxCMS 1.2.5及之前版本存在注入漏洞，该漏洞源于文件app/admin/controller/Download.php中参数ids的错误操作导致SQL注入。
FoxCMS 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/somatrasss/CVE-2025-29306
https://cloud.tencent.com/developer/article/2612899
https://www.hws.com/help/tech/1914.html
https://avd.aliyun.com/detail?id=AVD-2025-29180
https://www.cnvd.org.cn/flaw/show/CNVD-2025-09239
https://www.knowsafe.com/ti/info/0/995623
https://cn-sec.com/archives/3888400.html
https://nvd.nist.gov/vuln/detail/CVE-2025-29181