amalpvatayam67/day06-foxcms-rceThis tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.
This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of unserialize() on attacker-controlled input leading to remote code execution. This is a minimal, intentionally vulnerable educational replica — not FoxCMS itself.
chmod +x entrypoint.sh
docker build -t day6-foxcms .
docker run --rm -d -p 8080:80 --name day6 day6-foxcms
# Visit http://localhost:8080/public/images/index.php