CVE-2026-108120

Koozali SME Server version 11.0rc1-215 is vulnerable to a path traversal vulnerability in its View Logs functionality. This flaw allows an unauthenticated attacker to access files outside the intended directory, potentially resulting in the exfiltration of sensitive system and application files ....

EUVD-2026-104070

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

CVE-2026-108121

Koozali's SME Server version 11.0rc1-215 contains an improper input validation vulnerability within its domain creation functionality . An attacker with high privileges can exploit this flaw to inject reserved Apache configuration directives , which corrupts the httpd.conf file. This corruption p...

EUVD-2026-104069

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

PT-2026-117225

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

PT-2026-117226

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration directives, corrupting httpd.conf and preventing Apache from...

EUVD-2017-1355

Malware in sbrugna...

Koozali Foundation SME Server Open Redirect Vulnerability Vulnerability

Koozali Foundation SME Server is a cross-platform, scalable Linux server from the Koozali Foundation. An open redirection vulnerability exists in the user web login function in Koozali Foundation SME Server versions 8.x, 9.x, and 10.x. The vulnerability can be exploited to gain unauthorized acces...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

Open redirect

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027: URL Redirection to Untrusted Site

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

CVE-2017-1000027 concerns Koozali Foundation SME Server (versions 8.x–10.x). The vulnerability is an open URL redirect in the user web login function, enabling unauthorized account access. The available connected documents confirm the affected product family and the open redirect flaw as the root...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

PT-2017-10737

Name of the Vulnerable Software and Affected Versions Koozali Foundation SME Server versions 8.x through 10.x Description The issue concerns an open URL redirect vulnerability in the user web login function, which can result in unauthorized account access. Recommendations For versions 8.x through...