Agentejo Cockpit Cross-Site Request Forgery Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A cross-site request forgery vulnerability exists in Agentejo Cockpit version 0.6.2. A remote attacker can use this vulnerability to perform unauthorized actions e.g., change API tokens and passwords...

Agentejo Cockpit Directory Traversal Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A directory traversal vulnerability exists in Agentejo Cockpit version 0.6.2, which arises from a program that does not properly validate a file before performing operations on it. An attacker can exploit the...

Agentejo Cockpit Cross-Site Scripting Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites. A cross-site scripting vulnerability exists in Agentejo Cockpit version 0.6.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

Directory traversal

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15538

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

CVE-2018-15539

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15539

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15538

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

Cross site request forgery (csrf)

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

Cross site scripting

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

CVE-2018-15539

Agentejo Cockpit (Cockpit CMS) is affected by CVE-2018-15539 due to a lack of anti-CSRF protection. Multiple connected sources confirm a CSRF vulnerability that enables unauthorized actions such as changing API tokens and passwords. The CNVD entry explicitly notes a CSRF vulnerability in Cockpit ...

CVE-2018-15540

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...

CVE-2018-15539

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15538

Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities...

CVE-2018-15538

CVE-2018-15538 affects Agentejo Cockpit, a CMS for managing structured content. The CNVD entry CNVD-2018-21183 documents a Cross-Site Scripting vulnerability in Cockpit, specifically affecting version 0.6.2, enabling a remote attacker to inject arbitrary web script or HTML. The 0.6.2 release refe...

CVE-2018-15540

Agentejo Cockpit exposes a Directory Traversal vulnerability (CVE-2018-15540) due to insufficient validation when performing file operations via the /cockpit/media/api interface. The CNVD entry notes a traversal path allowing an attacker to move the filesystem and access arbitrary files in Cockpi...

CVE-2018-15539: Cross-Site Request Forgery (CSRF)

Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc...

CVE-2018-15540: Improper Limitation of a Pathname to a Restricted Directory

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal...