
Proof-of-concept exploit for CVE-2025-29306, a remote code execution vulnerability in FoxCMS v1.2.5 via the case display page. Includes a Python script for single-URL or batch scanning.
Description
Published: 2025-03-27 Updated: 2025-03-27
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
Usage:
python test_poc.py -u http://192.168.0.1/images/index.html "id" python test_poc.py -f url.txt "id"