PT-2025-24566 · Hax Cms · Hax Cms
Userrpr
·
Published
2025-06-09
·
Updated
2025-06-20
·
CVE-2025-49141
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HAX CMS PHP versions prior to 11.0.3
Description
The issue concerns the
gitImportSite functionality, which obtains a URL string from a POST request and insufficiently validates user input. This allows an authenticated attacker to craft a URL string that bypasses validation checks, enabling the execution of arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. The set remote function passes user input into proc open, yielding OS command injection.Recommendations
For versions prior to 11.0.3, update to version 11.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the
gitImportSite functionality until a patch is applied. Additionally, restricting the use of the set remote function and proc open calls with unvalidated user input can help minimize the risk of exploitation.Exploit
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hax Cms