mjdm records
10 published records for vendor mjdm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 4 · 40%
- Pre-auth RCE
- 4
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-494 Download of Code Without Integrity Check1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2023-50917Weaponized | MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.mjdm · majordomo · CWE-77 | Critical9.8 | — | 36.8% | Dec 15, 2023 |
60This week | CVE-2026-27175Weaponized | MajorDoMo Command Injection in rc/index.php via Race Conditionmjdm · majordomo · CWE-78 | Critical9.2 | — | 6.9% | Feb 18, 2026 |
60This week | CVE-2026-27174Weaponized | MajorDoMo Unauthenticated Remote Code Execution via Admin Console Evalmjdm · majordomo · CWE-94 | Critical9.3 | — | 6.8% | Feb 18, 2026 |
60This week | CVE-2026-27180Weaponized | MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoningmjdm · majordomo · CWE-494 | Critical9.3 | — | 1.1% | Feb 18, 2026 |
35Monitor | CVE-2026-27179Proof of concept | MajorDoMo Unauthenticated SQL Injection in Commands Modulemjdm · majordomo · CWE-89 | High8.8 | — | 0.5% | Feb 18, 2026 |
34Monitor | CVE-2026-27181No exploit | MajorDoMo Unauthenticated Module Uninstall via Market Endpointmjdm · majordomo · CWE-862 | High8.7 | — | 0.7% | Feb 18, 2026 |
28Monitor | CVE-2024-33465No exploit | Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php compoCWE-79 | High7.1 | — | 0.3% | Apr 30, 2024 |
21Monitor | CVE-2026-27178No exploit | MajorDoMo Stored Cross-Site Scripting via Method Parameters to Shoutboxmjdm · majordomo · CWE-79 | Medium5.3 | — | 0.2% | Feb 18, 2026 |
21Monitor | CVE-2026-27177No exploit | MajorDoMo Stored Cross-Site Scripting via Property Set Endpointmjdm · majordomo · CWE-79 | Medium5.3 | — | 0.2% | Feb 18, 2026 |
20Monitor | CVE-2026-27176Proof of concept | MajorDoMo Reflected Cross-Site Scripting in command.phpmjdm · majordomo · CWE-79 | Medium5.1 | — | 0.5% | Feb 18, 2026 |
- CVE-2023-5091760This week
MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.
CriticalCVSS 9.8WeaponizedEPSS 36%mjdm · majordomoDec 15, 2023
- CVE-2026-2717560This week
MajorDoMo Command Injection in rc/index.php via Race Condition
CriticalCVSS 9.2WeaponizedEPSS 6%mjdm · majordomoFeb 18, 2026
- CVE-2026-2717460This week
MajorDoMo Unauthenticated Remote Code Execution via Admin Console Eval
CriticalCVSS 9.3WeaponizedEPSS 6%mjdm · majordomoFeb 18, 2026
- CVE-2026-2718060This week
MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning
CriticalCVSS 9.3WeaponizedEPSS 1%mjdm · majordomoFeb 18, 2026
- CVE-2026-2717935Monitor
MajorDoMo Unauthenticated SQL Injection in Commands Module
HighCVSS 8.8Proof of conceptEPSS 0%mjdm · majordomoFeb 18, 2026
- CVE-2026-2718134Monitor
MajorDoMo Unauthenticated Module Uninstall via Market Endpoint
HighCVSS 8.7No exploitEPSS 0%mjdm · majordomoFeb 18, 2026
- CVE-2024-3346528Monitor
Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the thumb/thumb.php compo
HighCVSS 7.1No exploitEPSS 0%Apr 30, 2024
- CVE-2026-2717821Monitor
MajorDoMo Stored Cross-Site Scripting via Method Parameters to Shoutbox
MediumCVSS 5.3No exploitEPSS 0%mjdm · majordomoFeb 18, 2026
- CVE-2026-2717721Monitor
MajorDoMo Stored Cross-Site Scripting via Property Set Endpoint
MediumCVSS 5.3No exploitEPSS 0%mjdm · majordomoFeb 18, 2026
- CVE-2026-2717620Monitor
MajorDoMo Reflected Cross-Site Scripting in command.php
MediumCVSS 5.1Proof of conceptEPSS 0%mjdm · majordomoFeb 18, 2026