Skip to content
KitploitKITPLOIT
ToolsBlog
Log in
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/somatrasss/cve-2025-29306
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubsomatrasss/cve-2025-29306

CVE-2025-29306

Proof-of-concept exploit for CVE-2025-29306, a server parameter injection vulnerability in FoxCMS V1.2, enabling remote code execution via crafted HTTP requests.

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-29306

FOXCMS Content Management System Service Parameter Injection Vulnerability

1. Vulnerability Overview

FoxCMS is a free, commercially available and open-source website management system built on PHP+MySQL architecture. FOXCMS Content Management System has a service parameter injection vulnerability that attackers can exploit to gain control of the server.

2. Affected Versions

FOXCMS Content Management System V1.2

3. Reproduction Process

POC http://xx/images/index.html?id=%24{%40print(phpinfo())} Enter the POC to access the vulnerability page and find the information after phpinfo command execution

image

Download Tool