Search

Find a vulnerability

Search criteria

    6 vulnerabilities by Komodo

    CVE-2026-110005 (GCVE-0-2026-110005)

    Vulnerability from nvd – Published: 2026-10-13 19:23 – Updated: 2026-10-13 20:08
    VLAI
    Title
    Moghtech Komodo contains an OS command injection vulnerability
    Summary
    The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo's `Terminal` permission to obtain unrestricted host-level command execution.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA under the mitre root
    CNA scorecard E 42/100 over 154 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Komodo Komodo Affected: 1.19.1 , < 2.3.0 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-10-13T20:08:24.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/456950"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Komodo",
          "vendor": "Komodo",
          "versions": [
            {
              "lessThan": "2.3.0",
              "status": "affected",
              "version": "1.19.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The `periphery` agent\u0027s container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo\u0027s `Terminal` permission to obtain unrestricted host-level command execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T19:23:52.191Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://github.com/moghtech/komodo"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Moghtech Komodo contains an OS command injection vulnerability",
      "x_generator": {
        "engine": "VINCE 3.0.50",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-110005"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-110005",
    "datePublished": "2026-10-13T19:23:52.191Z",
    "dateReserved": "2026-10-13T13:54:36.279Z",
    "dateUpdated": "2026-10-13T20:08:24.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2005-4362 (GCVE-0-2005-4362)

    Vulnerability from nvd – Published: 2005-12-20 01:00 – Updated: 2024-08-07 23:46
    VLAI
    Summary
    SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2342 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/15966 vdb-entryx_refsource_BID
    http://secunia.com/advisories/18120 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2005/2993 vdb-entryx_refsource_VUPEN
    http://pridels0.blogspot.com/2005/12/komodo-cms-v… x_refsource_MISC
    Date Public
    2005-12-18 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:46:04.425Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15966",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15966"
          },
          {
            "name": "18120",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18120"
          },
          {
            "name": "ADV-2005-2993",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2993"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-09-13T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15966",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15966"
        },
        {
          "name": "18120",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18120"
        },
        {
          "name": "ADV-2005-2993",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2993"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15966",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15966"
            },
            {
              "name": "18120",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18120"
            },
            {
              "name": "ADV-2005-2993",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2993"
            },
            {
              "name": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
              "refsource": "MISC",
              "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4362",
    "datePublished": "2005-12-20T01:00:00.000Z",
    "dateReserved": "2005-12-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:46:04.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2005-4363 (GCVE-0-2005-4363)

    Vulnerability from nvd – Published: 2005-12-20 01:00 – Updated: 2024-08-07 23:46
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2342 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/15966 vdb-entryx_refsource_BID
    http://secunia.com/advisories/18120 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2005/2993 vdb-entryx_refsource_VUPEN
    http://www.osvdb.org/21793 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/21792 vdb-entryx_refsource_OSVDB
    http://pridels0.blogspot.com/2005/12/komodo-cms-v… x_refsource_MISC
    Date Public
    2005-12-18 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:46:04.279Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15966",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15966"
          },
          {
            "name": "18120",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18120"
          },
          {
            "name": "ADV-2005-2993",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2993"
          },
          {
            "name": "21793",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/21793"
          },
          {
            "name": "21792",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/21792"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-04-04T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15966",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15966"
        },
        {
          "name": "18120",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18120"
        },
        {
          "name": "ADV-2005-2993",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2993"
        },
        {
          "name": "21793",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/21793"
        },
        {
          "name": "21792",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/21792"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4363",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15966",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15966"
            },
            {
              "name": "18120",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18120"
            },
            {
              "name": "ADV-2005-2993",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2993"
            },
            {
              "name": "21793",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/21793"
            },
            {
              "name": "21792",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/21792"
            },
            {
              "name": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
              "refsource": "MISC",
              "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4363",
    "datePublished": "2005-12-20T01:00:00.000Z",
    "dateReserved": "2005-12-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:46:04.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2026-110005 (GCVE-0-2026-110005)

    Vulnerability from cvelistv5 – Published: 2026-10-13 19:23 – Updated: 2026-10-13 20:08
    VLAI
    Title
    Moghtech Komodo contains an OS command injection vulnerability
    Summary
    The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo's `Terminal` permission to obtain unrestricted host-level command execution.
    Severity
    No CVSS data available.
    CWE
    Assigner
    certcc CNA under the mitre root
    CNA scorecard E 42/100 over 154 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Komodo Komodo Affected: 1.19.1 , < 2.3.0 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-10-13T20:08:24.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://www.kb.cert.org/vuls/id/456950"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Komodo",
          "vendor": "Komodo",
          "versions": [
            {
              "lessThan": "2.3.0",
              "status": "affected",
              "version": "1.19.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The `periphery` agent\u0027s container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo\u0027s `Terminal` permission to obtain unrestricted host-level command execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T19:23:52.191Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://github.com/moghtech/komodo"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Moghtech Komodo contains an OS command injection vulnerability",
      "x_generator": {
        "engine": "VINCE 3.0.50",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-110005"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-110005",
    "datePublished": "2026-10-13T19:23:52.191Z",
    "dateReserved": "2026-10-13T13:54:36.279Z",
    "dateUpdated": "2026-10-13T20:08:24.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2005-4362 (GCVE-0-2005-4362)

    Vulnerability from cvelistv5 – Published: 2005-12-20 01:00 – Updated: 2024-08-07 23:46
    VLAI
    Summary
    SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2342 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/15966 vdb-entryx_refsource_BID
    http://secunia.com/advisories/18120 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2005/2993 vdb-entryx_refsource_VUPEN
    http://pridels0.blogspot.com/2005/12/komodo-cms-v… x_refsource_MISC
    Date Public
    2005-12-18 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:46:04.425Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15966",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15966"
          },
          {
            "name": "18120",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18120"
          },
          {
            "name": "ADV-2005-2993",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2993"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2007-09-13T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15966",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15966"
        },
        {
          "name": "18120",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18120"
        },
        {
          "name": "ADV-2005-2993",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2993"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15966",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15966"
            },
            {
              "name": "18120",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18120"
            },
            {
              "name": "ADV-2005-2993",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2993"
            },
            {
              "name": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
              "refsource": "MISC",
              "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4362",
    "datePublished": "2005-12-20T01:00:00.000Z",
    "dateReserved": "2005-12-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:46:04.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2005-4363 (GCVE-0-2005-4363)

    Vulnerability from cvelistv5 – Published: 2005-12-20 01:00 – Updated: 2024-08-07 23:46
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2342 records in the last 180 days details
    References
    URL Tags
    http://www.securityfocus.com/bid/15966 vdb-entryx_refsource_BID
    http://secunia.com/advisories/18120 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2005/2993 vdb-entryx_refsource_VUPEN
    http://www.osvdb.org/21793 vdb-entryx_refsource_OSVDB
    http://www.osvdb.org/21792 vdb-entryx_refsource_OSVDB
    http://pridels0.blogspot.com/2005/12/komodo-cms-v… x_refsource_MISC
    Date Public
    2005-12-18 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:46:04.279Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15966",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15966"
          },
          {
            "name": "18120",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18120"
          },
          {
            "name": "ADV-2005-2993",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2993"
          },
          {
            "name": "21793",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/21793"
          },
          {
            "name": "21792",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/21792"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-04-04T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15966",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15966"
        },
        {
          "name": "18120",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18120"
        },
        {
          "name": "ADV-2005-2993",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2993"
        },
        {
          "name": "21793",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/21793"
        },
        {
          "name": "21792",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/21792"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4363",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15966",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15966"
            },
            {
              "name": "18120",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18120"
            },
            {
              "name": "ADV-2005-2993",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2993"
            },
            {
              "name": "21793",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/21793"
            },
            {
              "name": "21792",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/21792"
            },
            {
              "name": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html",
              "refsource": "MISC",
              "url": "http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4363",
    "datePublished": "2005-12-20T01:00:00.000Z",
    "dateReserved": "2005-12-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:46:04.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}