Lucene search
MitreCVELIST:CVE-2020-35848HistoryDec 30, 2020 - 12:39 a.m.
CVE-2020-35848
2020-12-3000:39:05
mitre
www.cve.org
6
agentejo cockpit
nosql injection
controller/auth.php
newpassword function
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.
References
packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.html
getcockpit.com/
github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466
github.com/agentejo/cockpit/commit/33e7199575631ba1f74cba6b16b10c820bec59af
github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24b
Related
cve
cve
CVE-2020-35848
2020-12-30 01:15:12
nuclei
nuclei
Agentejo Cockpit <0.12.0 - NoSQL Injection
2021-04-13 19:30:08
prion
prion
Sql injection
2020-12-30 01:15:00
osv
osv
CVE-2020-35848
2020-12-30 01:15:12
nvd
nvd
CVE-2020-35848
2020-12-30 01:15:12
zdt
zdt
githubexploit
githubexploit
Exploit for SQL Injection in Agentejo Cockpit
2021-08-06 09:19:01
packetstorm
packetstorm
Cockpit CMS 0.11.1 NoSQL Injection
2021-08-10 00:00:00
exploitdb
exploitdb