CVE-2025-45239

An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - cve@mitre.org

Published

2025-05-05

Last modified

2025-05-13

Weaknesses

CWE-22

Affected products

• Foxcms (Qianfox)

References

• https://gist.github.com/chao112122/350e1af42ccea185206f8a8b9e4906e1
• https://gitee.com/qianfox/foxcms/tree/V1.2.5/