CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-49139

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a website block to load another site in an iframe. The application allows users to supply a target URL in the website block. When the HAX site is visited, the client's browser will query the supplied URL. An authenticated attacker can create a HAX site with a website block pointing at an attacker-controlled server running Responder or a similar tool. The attacker can then conduct a phishing attack by convincing another user to visit their malicious HAX site to harvest credentials. Version 11.0.0 contains a patch for the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 14.3%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2025-49139

Psu » Haxcms-Nodejs » Version: 0.0.10

cpe:2.3:a:psu:haxcms-nodejs:0.0.10
Psu » Haxcms-Nodejs » Version: 0.0.11

cpe:2.3:a:psu:haxcms-nodejs:0.0.11
Psu » Haxcms-Nodejs » Version: 0.0.12

cpe:2.3:a:psu:haxcms-nodejs:0.0.12
Psu » Haxcms-Nodejs » Version: 0.0.13

cpe:2.3:a:psu:haxcms-nodejs:0.0.13
Psu » Haxcms-Nodejs » Version: 0.0.14

cpe:2.3:a:psu:haxcms-nodejs:0.0.14
Psu » Haxcms-Nodejs » Version: 0.0.15

cpe:2.3:a:psu:haxcms-nodejs:0.0.15
Psu » Haxcms-Nodejs » Version: 0.0.16

cpe:2.3:a:psu:haxcms-nodejs:0.0.16
Psu » Haxcms-Nodejs » Version: 0.0.17

cpe:2.3:a:psu:haxcms-nodejs:0.0.17
Psu » Haxcms-Nodejs » Version: 0.0.18

cpe:2.3:a:psu:haxcms-nodejs:0.0.18
Psu » Haxcms-Nodejs » Version: 0.0.19

cpe:2.3:a:psu:haxcms-nodejs:0.0.19
Psu » Haxcms-Nodejs » Version: 0.0.3

cpe:2.3:a:psu:haxcms-nodejs:0.0.3
Psu » Haxcms-Nodejs » Version: 0.0.4

cpe:2.3:a:psu:haxcms-nodejs:0.0.4
Psu » Haxcms-Nodejs » Version: 0.0.5

cpe:2.3:a:psu:haxcms-nodejs:0.0.5
Psu » Haxcms-Nodejs » Version: 0.0.6

cpe:2.3:a:psu:haxcms-nodejs:0.0.6
Psu » Haxcms-Nodejs » Version: 0.0.7

cpe:2.3:a:psu:haxcms-nodejs:0.0.7
Psu » Haxcms-Nodejs » Version: 0.0.8

cpe:2.3:a:psu:haxcms-nodejs:0.0.8
Psu » Haxcms-Nodejs » Version: 0.0.9

cpe:2.3:a:psu:haxcms-nodejs:0.0.9
Psu » Haxcms-Nodejs » Version: 10.0.0

cpe:2.3:a:psu:haxcms-nodejs:10.0.0
Psu » Haxcms-Nodejs » Version: 10.0.1

cpe:2.3:a:psu:haxcms-nodejs:10.0.1
Psu » Haxcms-Nodejs » Version: 10.0.2

cpe:2.3:a:psu:haxcms-nodejs:10.0.2
Psu » Haxcms-Nodejs » Version: 10.0.3

cpe:2.3:a:psu:haxcms-nodejs:10.0.3
Psu » Haxcms-Nodejs » Version: 10.0.4

cpe:2.3:a:psu:haxcms-nodejs:10.0.4
Psu » Haxcms-Nodejs » Version: 10.0.5

cpe:2.3:a:psu:haxcms-nodejs:10.0.5
Psu » Haxcms-Nodejs » Version: 10.0.6

cpe:2.3:a:psu:haxcms-nodejs:10.0.6
Psu » Haxcms-Nodejs » Version: 9.0.0

cpe:2.3:a:psu:haxcms-nodejs:9.0.0
Psu » Haxcms-Nodejs » Version: 9.0.1

cpe:2.3:a:psu:haxcms-nodejs:9.0.1
Psu » Haxcms-Nodejs » Version: 9.0.10

cpe:2.3:a:psu:haxcms-nodejs:9.0.10
Psu » Haxcms-Nodejs » Version: 9.0.11

cpe:2.3:a:psu:haxcms-nodejs:9.0.11
Psu » Haxcms-Nodejs » Version: 9.0.12

cpe:2.3:a:psu:haxcms-nodejs:9.0.12
Psu » Haxcms-Nodejs » Version: 9.0.13

cpe:2.3:a:psu:haxcms-nodejs:9.0.13
Psu » Haxcms-Nodejs » Version: 9.0.14

cpe:2.3:a:psu:haxcms-nodejs:9.0.14
Psu » Haxcms-Nodejs » Version: 9.0.15

cpe:2.3:a:psu:haxcms-nodejs:9.0.15
Psu » Haxcms-Nodejs » Version: 9.0.16

cpe:2.3:a:psu:haxcms-nodejs:9.0.16
Psu » Haxcms-Nodejs » Version: 9.0.17

cpe:2.3:a:psu:haxcms-nodejs:9.0.17
Psu » Haxcms-Nodejs » Version: 9.0.18

cpe:2.3:a:psu:haxcms-nodejs:9.0.18
Psu » Haxcms-Nodejs » Version: 9.0.19

cpe:2.3:a:psu:haxcms-nodejs:9.0.19
Psu » Haxcms-Nodejs » Version: 9.0.2

cpe:2.3:a:psu:haxcms-nodejs:9.0.2
Psu » Haxcms-Nodejs » Version: 9.0.20

cpe:2.3:a:psu:haxcms-nodejs:9.0.20
Psu » Haxcms-Nodejs » Version: 9.0.21

cpe:2.3:a:psu:haxcms-nodejs:9.0.21
Psu » Haxcms-Nodejs » Version: 9.0.3

cpe:2.3:a:psu:haxcms-nodejs:9.0.3
Psu » Haxcms-Nodejs » Version: 9.0.4

cpe:2.3:a:psu:haxcms-nodejs:9.0.4
Psu » Haxcms-Nodejs » Version: 9.0.5

cpe:2.3:a:psu:haxcms-nodejs:9.0.5
Psu » Haxcms-Nodejs » Version: 9.0.6

cpe:2.3:a:psu:haxcms-nodejs:9.0.6
Psu » Haxcms-Nodejs » Version: 9.0.7

cpe:2.3:a:psu:haxcms-nodejs:9.0.7
Psu » Haxcms-Nodejs » Version: 9.0.8

cpe:2.3:a:psu:haxcms-nodejs:9.0.8
Psu » Haxcms-Nodejs » Version: 9.0.9

cpe:2.3:a:psu:haxcms-nodejs:9.0.9
Psu » Haxcms-Php » Version: 0.0.1

cpe:2.3:a:psu:haxcms-php:0.0.1
Psu » Haxcms-Php » Version: 0.1.0

cpe:2.3:a:psu:haxcms-php:0.1.0
Psu » Haxcms-Php » Version: 0.11.0

cpe:2.3:a:psu:haxcms-php:0.11.0
Psu » Haxcms-Php » Version: 0.12.0

cpe:2.3:a:psu:haxcms-php:0.12.0
Psu » Haxcms-Php » Version: 0.12.1

cpe:2.3:a:psu:haxcms-php:0.12.1
Psu » Haxcms-Php » Version: 0.12.2

cpe:2.3:a:psu:haxcms-php:0.12.2
Psu » Haxcms-Php » Version: 0.12.3

cpe:2.3:a:psu:haxcms-php:0.12.3
Psu » Haxcms-Php » Version: 0.2.0

cpe:2.3:a:psu:haxcms-php:0.2.0
Psu » Haxcms-Php » Version: 0.3.0

cpe:2.3:a:psu:haxcms-php:0.3.0
Psu » Haxcms-Php » Version: 0.4.0

cpe:2.3:a:psu:haxcms-php:0.4.0
Psu » Haxcms-Php » Version: 0.5.0

cpe:2.3:a:psu:haxcms-php:0.5.0
Psu » Haxcms-Php » Version: 0.6.0

cpe:2.3:a:psu:haxcms-php:0.6.0
Psu » Haxcms-Php » Version: 0.7.0

cpe:2.3:a:psu:haxcms-php:0.7.0
Psu » Haxcms-Php » Version: 0.8.0

cpe:2.3:a:psu:haxcms-php:0.8.0
Psu » Haxcms-Php » Version: 0.8.1

cpe:2.3:a:psu:haxcms-php:0.8.1
Psu » Haxcms-Php » Version: 0.8.2

cpe:2.3:a:psu:haxcms-php:0.8.2
Psu » Haxcms-Php » Version: 0.9.0

cpe:2.3:a:psu:haxcms-php:0.9.0
Psu » Haxcms-Php » Version: 1.0.0

cpe:2.3:a:psu:haxcms-php:1.0.0
Psu » Haxcms-Php » Version: 1.1.0

cpe:2.3:a:psu:haxcms-php:1.1.0
Psu » Haxcms-Php » Version: 1.1.1

cpe:2.3:a:psu:haxcms-php:1.1.1
Psu » Haxcms-Php » Version: 1.1.2

cpe:2.3:a:psu:haxcms-php:1.1.2
Psu » Haxcms-Php » Version: 1.1.3

cpe:2.3:a:psu:haxcms-php:1.1.3
Psu » Haxcms-Php » Version: 1.2.0

cpe:2.3:a:psu:haxcms-php:1.2.0
Psu » Haxcms-Php » Version: 1.2.1

cpe:2.3:a:psu:haxcms-php:1.2.1
Psu » Haxcms-Php » Version: 1.2.10

cpe:2.3:a:psu:haxcms-php:1.2.10
Psu » Haxcms-Php » Version: 1.2.11

cpe:2.3:a:psu:haxcms-php:1.2.11
Psu » Haxcms-Php » Version: 1.2.12

cpe:2.3:a:psu:haxcms-php:1.2.12
Psu » Haxcms-Php » Version: 1.2.13

cpe:2.3:a:psu:haxcms-php:1.2.13
Psu » Haxcms-Php » Version: 1.2.2

cpe:2.3:a:psu:haxcms-php:1.2.2
Psu » Haxcms-Php » Version: 1.2.3

cpe:2.3:a:psu:haxcms-php:1.2.3
Psu » Haxcms-Php » Version: 1.2.4

cpe:2.3:a:psu:haxcms-php:1.2.4
Psu » Haxcms-Php » Version: 1.2.5

cpe:2.3:a:psu:haxcms-php:1.2.5
Psu » Haxcms-Php » Version: 1.2.6

cpe:2.3:a:psu:haxcms-php:1.2.6
Psu » Haxcms-Php » Version: 1.2.7

cpe:2.3:a:psu:haxcms-php:1.2.7
Psu » Haxcms-Php » Version: 1.2.8

cpe:2.3:a:psu:haxcms-php:1.2.8
Psu » Haxcms-Php » Version: 1.2.9

cpe:2.3:a:psu:haxcms-php:1.2.9
Psu » Haxcms-Php » Version: 1.3.0

cpe:2.3:a:psu:haxcms-php:1.3.0
Psu » Haxcms-Php » Version: 1.3.1

cpe:2.3:a:psu:haxcms-php:1.3.1
Psu » Haxcms-Php » Version: 1.4.0

cpe:2.3:a:psu:haxcms-php:1.4.0
Psu » Haxcms-Php » Version: 10.0.0

cpe:2.3:a:psu:haxcms-php:10.0.0
Psu » Haxcms-Php » Version: 10.0.3

cpe:2.3:a:psu:haxcms-php:10.0.3
Psu » Haxcms-Php » Version: 2.0.0

cpe:2.3:a:psu:haxcms-php:2.0.0
Psu » Haxcms-Php » Version: 2.0.1

cpe:2.3:a:psu:haxcms-php:2.0.1
Psu » Haxcms-Php » Version: 2.0.2

cpe:2.3:a:psu:haxcms-php:2.0.2
Psu » Haxcms-Php » Version: 2.0.3

cpe:2.3:a:psu:haxcms-php:2.0.3
Psu » Haxcms-Php » Version: 2.0.4

cpe:2.3:a:psu:haxcms-php:2.0.4
Psu » Haxcms-Php » Version: 2.0.5

cpe:2.3:a:psu:haxcms-php:2.0.5
Psu » Haxcms-Php » Version: 2.0.6

cpe:2.3:a:psu:haxcms-php:2.0.6
Psu » Haxcms-Php » Version: 2.0.7

cpe:2.3:a:psu:haxcms-php:2.0.7
Psu » Haxcms-Php » Version: 2.0.8

cpe:2.3:a:psu:haxcms-php:2.0.8
Psu » Haxcms-Php » Version: 2.0.9

cpe:2.3:a:psu:haxcms-php:2.0.9
Psu » Haxcms-Php » Version: 3.0.0

cpe:2.3:a:psu:haxcms-php:3.0.0
Psu » Haxcms-Php » Version: 4.0.0

cpe:2.3:a:psu:haxcms-php:4.0.0
Psu » Haxcms-Php » Version: 4.1.0

cpe:2.3:a:psu:haxcms-php:4.1.0
Psu » Haxcms-Php » Version: 5.1.0

cpe:2.3:a:psu:haxcms-php:5.1.0
Psu » Haxcms-Php » Version: 6.0.1

cpe:2.3:a:psu:haxcms-php:6.0.1
Psu » Haxcms-Php » Version: 7.0.1

cpe:2.3:a:psu:haxcms-php:7.0.1
Psu » Haxcms-Php » Version: 7.0.10

cpe:2.3:a:psu:haxcms-php:7.0.10
Psu » Haxcms-Php » Version: 7.0.13

cpe:2.3:a:psu:haxcms-php:7.0.13
Psu » Haxcms-Php » Version: 7.0.14

cpe:2.3:a:psu:haxcms-php:7.0.14
Psu » Haxcms-Php » Version: 7.0.15

cpe:2.3:a:psu:haxcms-php:7.0.15
Psu » Haxcms-Php » Version: 7.0.16

cpe:2.3:a:psu:haxcms-php:7.0.16
Psu » Haxcms-Php » Version: 7.0.2

cpe:2.3:a:psu:haxcms-php:7.0.2
Psu » Haxcms-Php » Version: 7.0.3

cpe:2.3:a:psu:haxcms-php:7.0.3
Psu » Haxcms-Php » Version: 8.0.0

cpe:2.3:a:psu:haxcms-php:8.0.0
Psu » Haxcms-Php » Version: 9.0.0

cpe:2.3:a:psu:haxcms-php:9.0.0
Psu » Haxcms-Php » Version: 9.0.1

cpe:2.3:a:psu:haxcms-php:9.0.1
Psu » Haxcms-Php » Version: 9.0.2

cpe:2.3:a:psu:haxcms-php:9.0.2
Psu » Haxcms-Php » Version: 9.0.21

cpe:2.3:a:psu:haxcms-php:9.0.21
Psu » Haxcms-Php » Version: 9.0.3

cpe:2.3:a:psu:haxcms-php:9.0.3
Psu » Haxcms-Php » Version: 9.0.5

cpe:2.3:a:psu:haxcms-php:9.0.5
Psu » Haxcms-Php » Version: 9.0.6

cpe:2.3:a:psu:haxcms-php:9.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-49139

Products

Pricing

Contact Us