Product: FoxCMS

Auto Added by WPeMatico

CVE-2024-12901 | FoxCMS up to 1.2 API Endpoint Site.php password improper authorization

2024-12-22

·

f1tym1

A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint. The manipulation of the argument password leads to improper authorization. This vulnerability is known as CVE-2024-12901. The attack can be launched remotely. Furthermore, there is an…
Read More
CVE-2024-12900 | FoxCMS up to 1.2 Configuration File /install/installdb.php database password code injection

2024-12-22

·

f1tym1

A vulnerability classified as critical has been found in FoxCMS up to 1.2. Affected is an unknown function of the file /install/installdb.php of the component Configuration File Handler. The manipulation of the argument database password leads to code injection. This vulnerability is traded as CVE-2024-12900. It is possible to launch the attack remotely. Furthermore, there…
Read More

Post

Post