{"metadata": {"vulnerability": "cve-2025-49141", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-06-02T10:39:41.634Z", "date_only": false, "value": "2025-06-02T10:39:41.634Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-49141", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-09T16:20:55Z", "date_only": false, "value": "2025-06-09T16:20:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw", "record": "CVE-2025-49141", "field": "creation_timestamp", "uuid": "0b77a229-f4cc-46df-8245-71a7aa888fcb", "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw"}, {"timestamp": "2025-06-09T20:30:34Z", "date_only": false, "value": "2025-06-09T20:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G4CF-PP4X-HQGW", "record": "GHSA-G4CF-PP4X-HQGW", "field": "published"}, {"timestamp": "2025-06-09T21:11:08.889Z", "date_only": false, "value": "2025-06-09T21:11:08.889Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-49141", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-09T21:11:08.889Z", "date_only": false, "value": "2025-06-09T21:11:08.889Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-49141", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-09T21:15:47Z", "date_only": false, "value": "2025-06-09T21:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G4CF-PP4X-HQGW", "record": "GHSA-G4CF-PP4X-HQGW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-09T21:15:47.360Z", "date_only": false, "value": "2025-06-09T21:15:47.360", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49141", "record": "FKIE_CVE-2025-49141", "field": "published"}, {"timestamp": "2025-06-09T21:31:56Z", "date_only": false, "value": "2025-06-09T21:31:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17782", "record": "CVE-2025-49141", "field": "creation_timestamp", "uuid": "517a8818-24cb-43dd-9b4f-f82ca27ec317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-49141\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue.\n\ud83d\udccf Published: 2025-06-09T21:11:08.889Z\n\ud83d\udccf Modified: 2025-06-09T21:11:08.889Z\n\ud83d\udd17 References:\n1. https://github.com/haxtheweb/issues/security/advisories/GHSA-g4cf-pp4x-hqgw\n2. https://github.com/haxtheweb/haxcms-nodejs/commit/5131fea6b6be611db76a618f89bd2e164752e9b3", "url": "https://t.me/DarkWebInformer_CVEAlerts/17782"}, {"timestamp": "2025-06-09T23:48:17.249Z", "date_only": false, "value": "2025-06-09T23:48:17.249928Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7kvfnehj25", "record": "CVE-2025-49141", "field": "creation_timestamp", "uuid": "ad945752-a203-4a10-8e7a-5fcee0340183", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr7kvfnehj25"}, {"timestamp": "2025-06-10T15:09:25.929Z", "date_only": false, "value": "2025-06-10T15:09:25.929196Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-49141", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-10T15:09:25.929Z", "date_only": false, "value": "2025-06-10T15:09:25.929196Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49141", "record": "FKIE_CVE-2025-49141", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-10T15:29:29.971Z", "date_only": false, "value": "2025-06-10T15:29:29.971Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-49141", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-10T15:29:29.971Z", "date_only": false, "value": "2025-06-10T15:29:29.971Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-49141", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T17:24:48Z", "date_only": false, "value": "2025-06-20T17:24:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G4CF-PP4X-HQGW", "record": "GHSA-G4CF-PP4X-HQGW", "field": "modified"}, {"timestamp": "2026-06-17T09:30:49Z", "date_only": false, "value": "2026-06-17T09:30:49.000", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-49141", "record": "FKIE_CVE-2025-49141", "field": "lastModified"}]}