Sme Server
Approved changes feed: RSS · Atom
cpe:2.3:a:koozali:sme_server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Koozali (2a275f0f-7b8b-540c-a69c-3cafc2bb6da8) |
|---|---|
| Product | Sme Server (7b46fa7d-2ee5-5ebc-889d-703f185302c3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-108120 |
vulnerable | 2026-11-03 10:18:02.113491 |
path traversal inKoozali - SME Server
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of
koozali's SME Server version 11.0rc1-215 allowing an unauthenticated
attacker to access files outside of the intended directory, leading to
exfiltration of files located outside the intended system logs
directory, including potentially sensitive system and application files.
Published: 2026-10-19T05:12:00.139Z
Updated: 2026-10-19T18:33:10.143Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-108121 |
vulnerable | 2026-11-03 10:18:01.801420 |
Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service
Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's
SME Server version 11.0rc1-215, allowing an attacker with high privileges
to inject reserved Apache configuration directives, corrupting
httpd.conf and preventing Apache from starting after a server reboot,
resulting in a denial-of-service (DoS) condition affecting the web
server and its hosted virtual hosts.
Published: 2026-10-19T05:07:58.680Z
Updated: 2026-10-19T17:36:10.887Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.