Lucene search
GoogleOSV:CVE-2020-35847HistoryDec 30, 2020 - 1:15 a.m.
CVE-2020-35847
2020-12-3001:15:12
Google
osv.dev
13
agentejo cockpit
nosql injection
cve-2020-35847
controller/auth.php
resetpassword function
software
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.
References
packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html
packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.html
getcockpit.com/
github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466
github.com/agentejo/cockpit/commit/33e7199575631ba1f74cba6b16b10c820bec59af
github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24b
Related
prion
prion
Sql injection
2020-12-30 01:15:00
nuclei
nuclei
Agentejo Cockpit <0.11.2 - NoSQL Injection
2021-04-13 19:19:41
cve
cve
CVE-2020-35847
2020-12-30 01:15:12
cvelist
cvelist
CVE-2020-35847
2020-12-30 00:38:56
nvd
nvd
CVE-2020-35847
2020-12-30 01:15:12
attackerkb
attackerkb
CVE-2020-35847
2020-12-30 00:00:00
CVE-2020-35846
2020-12-30 00:00:00
packetstorm
packetstorm
Cockpit CMS 0.11.1 NoSQL Injection / Remote Command Execution
2021-04-21 00:00:00
Cockpit CMS 0.11.1 NoSQL Injection
2021-08-10 00:00:00
zdt
zdt
metasploit
metasploit
Cockpit CMS NoSQLi to RCE
2021-04-18 22:52:04
githubexploit
githubexploit
Exploit for SQL Injection in Agentejo Cockpit
2021-08-06 09:19:01
exploitdb
exploitdb