67 matches found
PT-2020-17483 · Agentejo · Agentejo Cockpit
Name of the Vulnerable Software and Affected Versions: Agentejo Cockpit versions prior to 0.11.2 Description: The issue allows NoSQL injection via the check function in Controller/Auth.php. Recommendations: For versions prior to 0.11.2, update to version 0.11.2 or later to resolve the issue. As a...
Agentejo Cockpit SQL注入漏洞
Agentejo Cockpit is a self-hosted "headless" and api driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit prior to version 0.11.2. The vulnerability can be exploited to conduct NoSQL injection attacks via the Controller/Auth.php che...
Agentejo Cockpit SQL注入漏洞
Agentejo Cockpit is a self-hosted "headless" and api-driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit versions prior to 0.11.2. The vulnerability can be exploited to conduct a NoSQL injection attack via the Controller/Auth.php...
Agentejo Cockpit Code Issue Vulnerability
Agentejo Cockpit is a management system for managing structured content on websites from Agentejo, Germany. Agentejo Cockpit cockpit-project.org A code issue vulnerability exists that arises from improper design or implementation during code development for a web system or product...
Agentejo Cockpit SQL注入漏洞
Agentejo Cockpit is a self-hosted "headless" and api driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit prior to version 0.11.2. The vulnerability can be exploited to conduct a NoSQL injection attack via the Controller/Auth.php...
Agentejo Cockpit cross-site scripting vulnerability (CNVD-2021-24260)
Agentejo Cockpit is a self-hosted "headless" and api-driven lightweight, open source content management system. Agentejo Cockpit 0.10.2 suffers from a reflected cross-site scripting vulnerability. The vulnerability stems from insufficient validation of the to parameter in the /auth/login route. A...
CVE-2020-14408
An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector...
CVE-2020-14408
An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector...
Cross site scripting
An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector...
CVE-2020-14408
An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector...
CVE-2020-14408
CVE-2020-14408 affects Agentejo Cockpit 0.10.2. A reflected XSS vulnerability arises from insufficient sanitization of the to parameter in the /auth/login route, allowing injection of arbitrary JavaScript into the page content. Impact is described as executing JS in the victim’s browser, potentia...
Agentejo Cockpit Cross-Site Request Forgery Vulnerability
Agentejo Cockpit is a management system for managing structured content on websites. A cross-site request forgery vulnerability exists in Agentejo Cockpit version 0.6.2. A remote attacker can use this vulnerability to perform unauthorized actions e.g., change API tokens and passwords...
Agentejo Cockpit Directory Traversal Vulnerability
Agentejo Cockpit is a management system for managing structured content on websites. A directory traversal vulnerability exists in Agentejo Cockpit version 0.6.2, which arises from a program that does not properly validate a file before performing operations on it. An attacker can exploit the...
Agentejo Cockpit Cross-Site Scripting Vulnerability
Agentejo Cockpit is a management system for managing structured content on websites. A cross-site scripting vulnerability exists in Agentejo Cockpit version 0.6.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2018-15540
Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...
CVE-2018-15540
Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...
Directory traversal
Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...
CVE-2018-15538
Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...