Cockpit Security Vulnerabilities and Issues — Cockpit CVE List | Vulners.com

Lucene search

K

AgentejoCockpit

4 matches found

CVE•added 2020/12/30 1:15 a.m.•139 views

CVE-2020-35847

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

9.8CVSS9.4AI score0.9391EPSS

CVE•added 2020/12/30 1:15 a.m.•138 views

CVE-2020-35846

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

9.8CVSS9.4AI score0.93049EPSS

CVE•added 2020/12/30 1:15 a.m.•129 views

CVE-2020-35848

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

9.8CVSS9.5AI score0.91029EPSS

CVE•added 2020/06/17 8:15 p.m.•54 views

CVE-2020-14408

An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector.

6.1CVSS6.2AI score0.01606EPSS