CVE-2026-27179
Unauthenticated SQL Injection in MajorDoMo Commands Module Enables Admin Access
Publication date: 2026-02-18
Last updated on: 2026-02-20
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mjdm | majordomo | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-89 | The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
MajorDoMo contains an unauthenticated SQL injection vulnerability in its commands module. Specifically, the commands_search.inc.php file uses the $_GET['parent'] parameter directly in SQL queries without sanitization or parameterized queries. This allows attackers to perform time-based blind SQL injection attacks, such as using UNION SELECT SLEEP() syntax, without needing to authenticate.
Because the commands module can be loaded without authentication via the /objects/?module=commands endpoint, an attacker can exploit this vulnerability remotely and extract sensitive data.
Additionally, MajorDoMo stores admin passwords as unsalted MD5 hashes, which can be extracted through this vulnerability, potentially allowing attackers to gain admin panel access.
How can this vulnerability impact me? :
This vulnerability can have serious impacts including unauthorized access to sensitive information stored in the database.
- Attackers can extract admin credentials due to the unsalted MD5 password storage.
- Successful exploitation can lead to unauthorized admin panel access.
- Data confidentiality is compromised as attackers can perform SQL injection to retrieve sensitive data.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know