Description
FOXCMS黔狐是一款基于PHP和MySQL架构的开源网站管理系统。该漏洞存在于FOXCMS黔狐内容管理系统的服务参数中，攻击者可以通过注入恶意参数，执行任意代码，从而获取服务器的控制权，可能导致敏感信息泄露、数据篡改等严重后果。
黔狐CMS /images/index.html 代码执行漏洞（CVE-2025-29306）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-29306
https://www.aioncloud.com/2025-04-vulnerability-report-foxcms-qianhu-remote-code-executioncve-2025-29306/
https://www.offsec.com/blog/cve-2025-29306/
https://github.com/verylazytech/CVE-2025-29306
https://dev.to/verylazytech/poc-cve-2025-29306-foxcms-imagesindexhtml-code-execution-vulnerability-3lnk
https://pentest-tools.com/vulnerabilities-exploits/foxcms-v125-remote-code-execution_27005
https://www.exploit-db.com/exploits/52267
https://systemweakness.com/poc-cve-2025-29306-foxcms-images-index-html-code-execution-vulnerability-0c4db3905fd0
https://www.cve.org/CVERecord?id=CVE-2025-29306