{"metadata": {"vulnerability": "CVE-2023-49954", "count": 28, "kinds": {"milestone": 5, "sighting": 9, "kev": 0, "other": 14}}, "data": [{"timestamp": "2023-12-03T00:00:00Z", "date_only": false, "value": "2023-12-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-49954", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:34.973Z", "date_only": false, "value": "2023-12-13T01:20:34.973338Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-49954", "record": "GSD-2023-49954", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-16T07:10:06Z", "date_only": false, "value": "2023-12-16T07:10:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1714", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "56d62d2c-9b64-42c4-a096-2797edb39744", "content": "https://github.com/CVE-2023-49954/CVE-2023-49954.github.io\nSQL Injection in 3CX CRM Integration\n\n#github", "url": "https://t.me/CNArsenal/1714"}, {"timestamp": "2023-12-16T07:47:47Z", "date_only": false, "value": "2023-12-16T07:47:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3680", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "72698c48-9015-480e-aaa7-544882e06372", "content": "https://github.com/CVE-2023-49954/CVE-2023-49954.github.io\nSQL Injection in 3CX CRM Integration\n\n#github", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3680"}, {"timestamp": "2023-12-16T12:30:46Z", "date_only": false, "value": "2023-12-16T12:30:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9594", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "00096db4-6736-4783-94c4-6ce08bbbcd8f", "content": "#exploit\n1. CVE-2023-6295:\nso-widgets-bundle < 1.51.0 - Admin+ LFI\nhttps://0day.work/cve-2023-6295-so-widgets-bundle-1-51-0-admin-local-file-inclusion\n\n2. CVE-2023-49954:\nSQL Injection in 3CX CRM Integration\nhttps://github.com/CVE-2023-49954/CVE-2023-49954.github.io\n\n3. Whatsapp Exploit to spoofing impersonate of reply message\nhttps://github.com/lichti/whats-spoofing", "url": "https://t.me/CyberSecurityTechnologies/9594"}, {"timestamp": "2023-12-16T19:49:11Z", "date_only": false, "value": "2023-12-16T19:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NqMiySbxmIrZSmnXeniM-UaOpCcYSdW_8PGgXD3X0qTw6g", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "859abbc3-5937-4fb0-a143-ea748b403a9a"}, {"timestamp": "2023-12-25T00:00:00Z", "date_only": false, "value": "2023-12-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-49954", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-12-25T07:19:17.468Z", "date_only": false, "value": "2023-12-25T07:19:17.468Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-49954", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-25T08:15:07Z", "date_only": false, "value": "2023-12-25T08:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2X74-JRHG-MR4P", "record": "GHSA-2X74-JRHG-MR4P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-12-25T08:15:07.933Z", "date_only": false, "value": "2023-12-25T08:15:07.933000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202312-0781", "record": "VAR-202312-0781", "field": "sources_release_date.data.0.date"}, {"timestamp": "2023-12-25T08:15:07.933Z", "date_only": false, "value": "2023-12-25T08:15:07.933", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49954", "record": "FKIE_CVE-2023-49954", "field": "published"}, {"timestamp": "2023-12-25T08:15:07.933Z", "date_only": false, "value": "2023-12-25T08:15:07.933", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-49954", "record": "GSD-2023-49954", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-12-25T09:30:21Z", "date_only": false, "value": "2023-12-25T09:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2X74-JRHG-MR4P", "record": "GHSA-2X74-JRHG-MR4P", "field": "published"}, {"timestamp": "2023-12-25T09:31:26Z", "date_only": false, "value": "2023-12-25T09:31:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/159177", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "e97c2e15-e929-4cf0-b06a-057fc21194b6", "content": "https://ift.tt/VTpyiBS\nCVE-2023-49954", "url": "https://t.me/ctinow/159177"}, {"timestamp": "2023-12-28T07:42:05Z", "date_only": false, "value": "2023-12-28T07:42:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2207", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "0adc40c0-d7e8-4c65-93f1-a25aedb343df", "content": "#ExploitObserverAlert\n\nCVE-2023-49954\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-49954. The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.", "url": "https://t.me/arpsyndicate/2207"}, {"timestamp": "2024-01-02T17:48:52.965Z", "date_only": false, "value": "2024-01-02T17:48:52.965465Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-49954", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-01-02T17:48:52.965Z", "date_only": false, "value": "2024-01-02T17:48:52.965465Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49954", "record": "FKIE_CVE-2023-49954", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-01-03T22:32:37.550Z", "date_only": false, "value": "2024-01-03T22:32:37.550", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-49954", "record": "GSD-2023-49954", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-08-02T22:09:49.465Z", "date_only": false, "value": "2024-08-02T22:09:49.465Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-49954", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:57:33Z", "date_only": false, "value": "2024-08-16T08:57:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2277", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "56b9f164-ce5b-47ad-a01d-e245a8f4572b", "content": "#exploit\n1. CVE-2023-6295:\nso-widgets-bundle < 1.51.0 - Admin+ LFI\nhttps://0day.work/cve-2023-6295-so-widgets-bundle-1-51-0-admin-local-file-inclusion\n\n2. CVE-2023-49954:\nSQL Injection in 3CX CRM Integration\nhttps://github.com/CVE-2023-49954/CVE-2023-49954.github.io\n\n3. Whatsapp Exploit to spoofing impersonate of reply message\nhttps://github.com/lichti/whats-spoofing", "url": "https://t.me/Rootsec_2/2277"}, {"timestamp": "2025-04-23T16:10:37.908Z", "date_only": false, "value": "2025-04-23T16:10:37.908Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-49954", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T16:10:37.908Z", "date_only": false, "value": "2025-04-23T16:10:37.908Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-49954", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T17:16:40.403Z", "date_only": false, "value": "2025-04-23T17:16:40.403000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202312-0781", "record": "VAR-202312-0781", "field": "sources_update_date.data.0.date"}, {"timestamp": "2025-04-23T18:30:51Z", "date_only": false, "value": "2025-04-23T18:30:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2X74-JRHG-MR4P", "record": "GHSA-2X74-JRHG-MR4P", "field": "modified"}, {"timestamp": "2025-04-25T01:39:35.705Z", "date_only": false, "value": "2025-04-25T01:39:35.705000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202312-0781", "record": "VAR-202312-0781", "field": "last_update_date"}, {"timestamp": "2025-08-31T03:01:10Z", "date_only": false, "value": "2025-08-31T03:01:10.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "1ed3108d-bc43-468a-89ff-023ab665a3f1"}, {"timestamp": "2025-08-31T03:12:49Z", "date_only": false, "value": "2025-08-31T03:12:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-49954", "field": "creation_timestamp", "uuid": "ff501ef1-db29-4a24-85f4-1e88a1733e02"}, {"timestamp": "2026-06-17T06:36:46.090Z", "date_only": false, "value": "2026-06-17T06:36:46.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49954", "record": "FKIE_CVE-2023-49954", "field": "lastModified"}]}