173 matches found
Cockpit CMS <= 2.14.0 - Path Traversal / Local File Inclusion
Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion LFI vulnerability when executed under PHP's built-in CLI server PHPSAPI == 'cli-server' or non-normalizing reverse proxies. The application fails to sanitize dot-dot sequences in PATHINFO routes starting with '/:' and...
Cockpit CMS 0.6.1 - Remote Code Execution
Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI. id: CVE-2020-35131 info: name: Cockpit CMS 0.6.1 ...
CockpitCMS-Arbitrary-File-Upload--XSS---Assets
Cockpit CMS 2.7.0 File Upload - XSS Author: Sergio Description: File upload vulnerability in Cockpit CMS 2.7.0 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L POC: This is the software version. This is the content of the XSS inject...
CVE-2026-31891
SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw Vulnerability Class : SQL Injection CWE-89 Product : Cockpit CMS Core Edition Affected Version : 2.13.4 and likely all versions since the Aggregation Optimizer was introduced Docker Image Tested : cockpithq/cockpit:core-2.13.4...
CVE-2026-39275
CVE-2026-39275 - Stored XSS Leading to Account Takeover in Cockpit CMS Note: Responsibly disclosed to and patched by the Cockpit CMS maintainers prior to publication...
cve-2023-41564-research
CVE-2023-41564 Vulnerability Overview CVE-2023-415641 is a stored XSS vulnerability in the CMS Cockpit = v2.6.3. When a .shtml HTML file is uploaded during file upload, JavaScript is executed the moment the uploaded file is opened. 1: https://nvd.nist.gov/vuln/detail/CVE-2023-41564 Attack Executi...
CVE-2020-35846
Cockpit CMS NoSQL Injection to Remote Code Execution : CVE-2020-35846 Description Cockpit CMS has some NoSQL Vulnerabilities which can be used to dump users' information, This information disclosures can be chained together to change users' passwords and which leads to Remote Code Execution on th...
CVE-2020-35847_CVE-2020-35848
Cockpit CMS NoSQL Injection CVE-2020-35847, CVE-2020-35848 Cockpit CMS before version 0.11.2 is vulnerable to a NoSQL Injection vulnerability in the /auth/resetpassword and /auth/newpassword that allows extraction of password reset tokens which allow for user details enumeration as well as passwo...
CVE_2020_35848
🧨 CVE‑2020‑35848 – Cockpit CMS 0.11.2 NoSQL Injection RCE Lab CVE‑2020‑35848 affects Agentejo Cockpit CMS versions before 0.11.2, introducing a critical NoSQL injection vulnerability in the /auth/newpassword endpoint. This flaw allows unauthenticated attackers to inject MongoDB operators into...
Linux Distros Unpatched Vulnerability : CVE-2026-39275
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and...
CVE-2026-82449
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...
CVE-2026-82449 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...
EUVD-2026-68098
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...
CVE-2026-82449
Cockpit CMS before 2.14.1 is affected by an account enumeration vulnerability in the auth check endpoint (modules/App/Controller/Auth.php). The root cause is a timing discrepancy in password verification: requests for existing accounts trigger a bcrypt hash comparison (slower), while requests for...
CVE-2026-82449 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...
CVE-2026-82449 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...
PT-2026-83428
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...
CVE-2026-82449: Observable Timing Discrepancy
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...