CVE-2005-4363
Komodo CMS 2.1 - Cross-Site Scripting via Search Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-4363. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Komodo CMS version 2.1 due to improper input sanitization. It outlines potential impacts but does not include functional exploit code.
Description
Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26911
The provided text describes a SQL injection vulnerability in Komodo CMS version 2.1 due to improper input sanitization. It outlines potential impacts but does not include functional exploit code.
Classification
Writeup 80%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
Komodo CMS 2.1
No auth needed
Prerequisites:
Access to the vulnerable application endpoint
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (6)
Core 6
Core References
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18120
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21793
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15966
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2993
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21792
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2005/12/komodo-cms-vuln.html
Scores
EPSS
0.0191
EPSS Percentile
77.2%
Details
Status
published
Products (1)
komodo/komodo_cms
2.1
Published
Dec 20, 2005
Tracked Since
Feb 18, 2026