Skip to content
OpenAdvisories

Vendor

sergejey

8 known vulnerabilities.

Products

MajorDoMo 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27180 Public exploit

    MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning

    MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning. The saverestore module exposes its admin() method through the /objects/?module=saverestore endpoint without …

    sergejey MajorDoMo
  • High 8.2
    CVE-2026-27179 Public exploit

    MajorDoMo Unauthenticated SQL Injection in Commands Module

    MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module. The commands_search.inc.php file directly interpolates the $_GET['parent'] parameter into multiple SQL queries without sanitization or parame…

    sergejey MajorDoMo
  • Critical 9.8
    CVE-2026-27174 Public exploit Scanner template

    MajorDoMo Unauthenticated Remote Code Execution via Admin Console Eval

    MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect() call that lacks an exit statement, all…

    sergejey MajorDoMo
  • Critical 9.8
    CVE-2026-27175 Public exploit

    MajorDoMo Command Injection in rc/index.php via Race Condition

    MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injection via rc/index.php. The $param variable from user input is interpolated into a command string within double quotes without sanitization via escapeshellarg(). The command…

    sergejey MajorDoMo