{"metadata": {"vulnerability": "CVE-2025-1116", "count": 22, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 11}}, "data": [{"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2025-1116", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2025-02-07T01:00:00Z", "date_only": false, "value": "2025-02-07T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2025-1116", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2025-02-07T16:35:19.396Z", "date_only": false, "value": "2025-02-07T16:35:19.396Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-07T17:40:42Z", "date_only": false, "value": "2025-02-07T17:40:42.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2025-1116", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2025-02-08T12:00:15.033Z", "date_only": false, "value": "2025-02-08T12:00:15.033Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-08T12:00:15.033Z", "date_only": false, "value": "2025-02-08T12:00:15.033Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2025-1116", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-08T12:04:16.787Z", "date_only": false, "value": "2025-02-08T12:04:16.787985Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113968169365786122", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "7ba0c0cc-13c4-438c-82e8-25873868a595", "url": "https://infosec.exchange/users/cve/statuses/113968169365786122"}, {"timestamp": "2025-02-08T12:15:39Z", "date_only": false, "value": "2025-02-08T12:15:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-534M-QP74-66QH", "record": "GHSA-534M-QP74-66QH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-02-08T12:15:39.660Z", "date_only": false, "value": "2025-02-08T12:15:39.660", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1116", "record": "FKIE_CVE-2025-1116", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-08T12:16:02.579Z", "date_only": false, "value": "2025-02-08T12:16:02.579542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lho3s626f72q", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "2d24b7b1-6ff9-453f-b370-11e7128b17b4", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lho3s626f72q"}, {"timestamp": "2025-02-08T12:32:33Z", "date_only": false, "value": "2025-02-08T12:32:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-534M-QP74-66QH", "record": "GHSA-534M-QP74-66QH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-08T12:32:33Z", "date_only": false, "value": "2025-02-08T12:32:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-534M-QP74-66QH", "record": "GHSA-534M-QP74-66QH", "field": "modified", "linked_record": true}, {"timestamp": "2025-02-08T13:03:30Z", "date_only": false, "value": "2025-02-08T13:03:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3872", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "c1bb7582-e126-481c-aeba-7717f682739f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1116\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/live_search/module/live_search.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-02-08T12:32:33Z\n\ud83d\udccf Modified: 2025-02-08T12:32:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1116\n2. https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771\n3. https://vuldb.com/?ctiid.295022\n4. https://vuldb.com/?id.295022\n5. https://vuldb.com/?submit.492051", "url": "https://t.me/DarkWebInformer_CVEAlerts/3872", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-08T13:30:21Z", "date_only": false, "value": "2025-02-08T13:30:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/furCsvM7X4xDMa5BP78SX1jyg0LrbMCTGKAvs7yOwO4My0o", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "13654d40-344c-4ddf-8e8f-e53430c0a218", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-08T13:49:10.154Z", "date_only": false, "value": "2025-02-08T13:49:10.154535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhoayp3hdx2n", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "740ae38c-b2e2-4e14-b12a-7de495614288", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhoayp3hdx2n"}, {"timestamp": "2025-02-08T14:03:11Z", "date_only": false, "value": "2025-02-08T14:03:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3874", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "205be16e-1163-46d1-b85d-7c793fe90cea", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1116\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-08T12:15:39.660\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771\n2. https://vuldb.com/?ctiid.295022\n3. https://vuldb.com/?id.295022\n4. https://vuldb.com/?submit.492051", "url": "https://t.me/DarkWebInformer_CVEAlerts/3874", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-08T15:44:49Z", "date_only": false, "value": "2025-02-08T15:44:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17537", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "ac0ffaa1-fc14-4a76-bcc7-0d59b68b6685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1116 - Dreamvention Live AJAX Search SQL Injection Vulnerability on OpenCart\", \n  \"Content\": \"CVE ID : CVE-2025-1116 \nPublished : Feb. 8, 2025, 12:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/live_search/module/live_search.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17537"}, {"timestamp": "2025-02-10T13:42:05.857Z", "date_only": false, "value": "2025-02-10T13:42:05.857895Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1116", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-10T13:42:05.857Z", "date_only": false, "value": "2025-02-10T13:42:05.857895Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1116", "record": "FKIE_CVE-2025-1116", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-12T20:51:42.931Z", "date_only": false, "value": "2025-02-12T20:51:42.931Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:51:42.931Z", "date_only": false, "value": "2025-02-12T20:51:42.931Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1116", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:38:24.837Z", "date_only": false, "value": "2026-06-17T08:38:24.837", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1116", "record": "FKIE_CVE-2025-1116", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-09T00:36:56.344Z", "anchors": {"origin": {"timestamp": "2025-02-08T12:00:15.033Z", "date_only": false, "value": "2025-02-08T12:00:15.033Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-08T12:00:15.033Z", "date_only": false, "value": "2025-02-08T12:00:15.033Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-02-08T13:03:30Z", "date_only": false, "value": "2025-02-08T13:03:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3872", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "c1bb7582-e126-481c-aeba-7717f682739f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1116\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/live_search/module/live_search.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-02-08T12:32:33Z\n\ud83d\udccf Modified: 2025-02-08T12:32:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1116\n2. https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771\n3. https://vuldb.com/?ctiid.295022\n4. https://vuldb.com/?id.295022\n5. https://vuldb.com/?submit.492051", "url": "https://t.me/DarkWebInformer_CVEAlerts/3872", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 3794.967, "hours": 1.0541575, "days": 0.04392322916666667, "min_seconds": 3794.967, "max_seconds": 3794.967, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-08T12:00:15.033Z", "date_only": false, "value": "2025-02-08T12:00:15.033Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-08T13:03:30Z", "date_only": false, "value": "2025-02-08T13:03:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3872", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "c1bb7582-e126-481c-aeba-7717f682739f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1116\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/live_search/module/live_search.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-02-08T12:32:33Z\n\ud83d\udccf Modified: 2025-02-08T12:32:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1116\n2. https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771\n3. https://vuldb.com/?ctiid.295022\n4. https://vuldb.com/?id.295022\n5. https://vuldb.com/?submit.492051", "url": "https://t.me/DarkWebInformer_CVEAlerts/3872", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 55168601.311156, "hours": 15324.61147532111, "days": 638.5254781383796, "min_seconds": 55168601.311156, "max_seconds": 55168601.311156, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-08T12:00:15.033Z", "date_only": false, "value": "2025-02-08T12:00:15.033Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1116", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T00:36:56.344Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 55164806.344156, "hours": 15323.55731782111, "days": 638.481554909213, "min_seconds": 55164806.344156, "max_seconds": 55164806.344156, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-08T13:03:30Z", "date_only": false, "value": "2025-02-08T13:03:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3872", "record": "CVE-2025-1116", "field": "creation_timestamp", "uuid": "c1bb7582-e126-481c-aeba-7717f682739f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1116\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/live_search/module/live_search.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-02-08T12:32:33Z\n\ud83d\udccf Modified: 2025-02-08T12:32:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1116\n2. https://gist.github.com/mcdruid/d6a41cfebd9e10e63a8c698d3a8ad771\n3. https://vuldb.com/?ctiid.295022\n4. https://vuldb.com/?id.295022\n5. https://vuldb.com/?submit.492051", "url": "https://t.me/DarkWebInformer_CVEAlerts/3872", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T00:36:56.344Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}