https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:36:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-243682 EUVD-2026-243682 https://cve.radiocsirt.org/vuln/euvd-2026-243682 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49141 <p>HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue.</p> <p>HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and insufficiently validates user input. The `set_remote` function later passes this input into `proc_open`, yielding OS command injection. An authenticated attacker can craft a URL string that bypasses the validation checks employed by the `filter_var` and `strpos` functions in order to execute arbitrary OS commands on the backend server. The attacker can exfiltrate command output via an HTTP request. Version 11.0.3 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49141 https://cve.radiocsirt.org/vuln/ghsa-g4cf-pp4x-hqgw <p><strong>Affected:</strong> npm: @haxtheweb/haxcms-nodejs</p> <p>### Summary The &#39;gitImportSite&#39; functionality obtains a URL string from a POST request and insufficiently validates user input. The ’set_remote’ function later passes this input into ’proc_open’, yielding OS command injection.</p> <p>### Details The vulnerability exists in the logic of the ’gitImportSite’ function, located in ’Operations.php’. The current implementation only relies on the ’filter_var’ and &#39;strpos&#39; functions to validate the URL, which is not sufficient to ensure absence of all Bash special characters used for command injection. </p> <p>#### Affected Resources • Operations.php:2103 gitImportSite() • \&lt;domain\&gt;/\&lt;user\&gt;/system/api/gitImportSite</p> <p>### PoC To replicate this vulnerability, authenticate and send a POST request to the &#39;gitImportSite&#39; endpoint with a crafted URL in the JSON data. Note, a valid token needs to be obtained by capturing a request to another API endpoint (such as &#39;archiveSite&#39;).</p> <p>1. Start a webserver. </p> <p>2. Initiate a request to the ’archiveSite’ endpoint. </p> <p>3. Capture and modify the request in BurpSuite. </p> <p>4. Observe command output in the HTTP request from the s…</p> <p><strong>Affected:</strong> npm: @haxtheweb/haxcms-nodejs</p> <p>### Summary The &#39;gitImportSite&#39; functionality obtains a URL string from a POST request and insufficiently validates user input. The ’set_remote’ function later passes this input into ’proc_open’, yielding OS command injection.</p> <p>### Details The vulnerability exists in the logic of the ’gitImportSite’ function, located in ’Operations.php’. The current implementation only relies on the ’filter_var’ and &#39;strpos&#39; functions to validate the URL, which is not sufficient to ensure absence of all Bash special characters used for command injection. </p> <p>#### Affected Resources • Operations.php:2103 gitImportSite() • \&lt;domain\&gt;/\&lt;user\&gt;/system/api/gitImportSite</p> <p>### PoC To replicate this vulnerability, authenticate and send a POST request to the &#39;gitImportSite&#39; endpoint with a crafted URL in the JSON data. Note, a valid token needs to be obtained by capturing a request to another API endpoint (such as &#39;archiveSite&#39;).</p> <p>1. Start a webserver. </p> <p>2. Initiate a request to the ’archiveSite’ endpoint. </p> <p>3. Capture and modify the request in BurpSuite. </p> <p>4. Observe command output in the HTTP request from the s…</p> https://cve.radiocsirt.org/vuln/ghsa-g4cf-pp4x-hqgw