Unrated severityNVD Advisory· Published Feb 19, 2026· Updated Mar 2, 2026
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig
CVE-2019-25423
Description
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with JavaScript payloads in parameters like PROXY_PORT, VISIBLE_HOSTNAME, ADMIN_MAIL_ADDRESS, CACHE_MEM, MAX_SIZE, MIN_SIZE, and DST_NOCACHE to execute arbitrary scripts in administrator browsers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2= 2.7.0+ 1 more
- (no CPE)range: = 2.7.0
- (no CPE)range: 2.7.0
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/46408mitreexploit
- www.vulncheck.com/advisories/comodo-dome-firewall-cross-site-scripting-via-proxyconfigmitrethird-party-advisory
- cdome.comodo.com/firewall/mitreproduct
- secure.comodo.com/home/purchase.phpmitreproduct
News mentions
0No linked articles in our index yet.