Lucene search
K

CVE-2025-49138 HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter

๐Ÿ—“๏ธย 09 Jun 2025ย 21:05:23Reported byย GitHub_MTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 15ย Views

HAX CMS prior to version 11.0.0 has a Local File Inclusion vulnerability via saveOutline API.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-49138
9 Jun 202515:01
โ€“circl
CNNVD
HAX ๅฎ‰ๅ…จๆผๆดž
9 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-49138
9 Jun 202521:05
โ€“cve
EUVD
EUVD-2025-17561
3 Oct 202520:07
โ€“euvd
Github Security Blog
HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
9 Jun 202517:47
โ€“github
NVD
CVE-2025-49138
9 Jun 202521:15
โ€“nvd
OSV
CVE-2025-49138 HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
9 Jun 202521:05
โ€“osv
OSV
GHSA-HXRR-X32W-CG8G HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter
9 Jun 202517:47
โ€“osv
Positive Technologies
PT-2025-24563 ยท Hax Cms ยท Hax Cms
9 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-49138
11 Jun 202521:08
โ€“redhatcve
Rows per page
[
  {
    "vendor": "haxtheweb",
    "product": "issues",
    "versions": [
      {
        "version": "< 11.0.0",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation