PT-2025-19753 · Foxcms · Foxcms

Chao112122 · Published 2025-05-05 · Updated 2025-06-12 · CVE-2025-45238

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions foxcms version 1.2.5

Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the delRestoreSerie method.

Recommendations For foxcms version 1.2.5, consider disabling the delRestoreSerie method until a patch is available to prevent arbitrary file deletion.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-45238

Affected Products

Foxcms

References · 9

• 🔥 https://gist.github.com/chao112122/27010786774f2bb584cc715fb027b95c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-45238 · Security Note
• https://osv.dev/vulnerability/CVE-2025-45238 · Vendor Advisory
• https://twitter.com/CVEnew/status/1919449653738930680 · Twitter Post
• https://twitter.com/cybercronai/status/1920082549054861821 · Twitter Post
• https://twitter.com/dailycve/status/1933238584917831692 · Twitter Post
• https://t.me/cvetracker/23064 · Telegram Post
• https://gitee.com/qianfox/foxcms · Note
• https://t.me/cvenotify/125530 · Telegram Post