Vulnerabilities

TI-2026-73631 CVE-2026-110005 · GHSA-hxg3-3gpg-5m9c

OS command injection in Komodo lets users run commands as root

MEDIUM 44

The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02233 Published 2026-10-13 Fixed in 2.3.0 CWE-78

TI-2005-04106 CVE-2005-4363 · GHSA-h7rf-79wj-2jmh

Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows…

LOW 30

Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01914 Published 2005-12-20 No fix listed

TI-2005-04105 CVE-2005-4362 · GHSA-86mv-vrc5-mh9v

SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to…

LOW 25

SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01153 Published 2005-12-20 No fix listed

Vulnerabilities

Filters

OS command injection in Komodo lets users run commands as root

Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows…

SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to…