CVE-2026-27181

all versions

MajorDoMo (aka Major Domestic Module) allows unauthenticated arbitrary module uninstallation through the market module. The market

7.5HIGH

CVE-2026-27180

all versions

MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compromise via u

9.8CRITICAL

CVE-2026-27179

all versions

MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module. The commands

8.2HIGH

CVE-2026-27178

all versions

MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability through method parameter injectio

7.2HIGH

CVE-2026-27177

all versions

MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability via the /objects/?op=set endpoint

7.2HIGH

CVE-2026-27176

all versions

MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php. The $qry param

6.1MEDIUM

CVE-2026-27175

all versions

MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injection via rc/index.php. The $param variable

9.8CRITICAL

CVE-2026-27174

all versions

MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An i

9.8CRITICAL

CVE-2023-50917

< 2023-11-15

MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is un

9.8CRITICAL

CVE-2010-0345

<= 1.1.3

Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject

CVE-2003-1367

<= 2.0

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allo

CVE-2000-0037

all versions

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

CVE-2000-0035

<= 1.94.4

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

CVE-1999-1220

<= 1.94.3

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is

CVE-1999-0207

all versions

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.