EDB-50185
PoCCockpit CMS 0.11.1 - 'Username Enumeration & Password Reset' NoSQL Injection
view exploit source exploit_dbtype webappsauthor Brian Ombongipublished 2021-08-10catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-35848US | critical9.8 | Exploit | ||
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. | ||||
| CVE-2020-35847US | critical9.8 | Exploit | ||
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan