POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability
PreviousPOC - Remote and unauthenticated attacker can send crafted HTTP requests to RCE - cve-2025-3248NextGitHub Dorks
Last updated
Was this helpful?
Last updated
Was this helpful?
Become VeryLazyTech ! 🎁
Follow us on:
✖ Twitter .
👾 Github .
📜 Medium .
📺 YouTube .
📩 Telegram .
🕵️♂️ My Site .
Visit our for e-books and courses. 📚
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
Disclaimer: This Proof of Concept (POC) is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.
To find potential targets, use Fofa (similar to Shodan.io):
Fofa Dork: (body="foxcms-logo" || body="foxcms-container") && body="div"
First, clone the repository:
Run the Exploit:
Read about it —
Learn & practice
Become VeryLazyTech ! 🎁
✖ Twitter .
👾 Github .
📜 Medium .
📺 YouTube .
📩 Telegram .
🕵️♂️ My Site .
Visit our for e-books and courses. 📚
