CVE-2020-35846

Mô tả

Tham khảo

• packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html · Exploit
• getcockpit.com · Product
• agentejo/cockpit commit 2a385af · Patch
• agentejo/cockpit commit 33e7199 · Patch
• agentejo/cockpit commit 79fc963 · Patch

Lỗ hổng khác của cockpit

• CVE-2026-31891TRUNG BÌNH 6.5Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is poten…
• CVE-2025-7053TRUNG BÌNH 6.1A vulnerability was found in Cockpit up to 2.11.3. It has been rated as problematic. This issue affects some unknown processing of the file …
• CVE-2024-4825NGHIÊM TRỌNG 9.8A vulnerability has been discovered in Agentejo Cockpit CMS v0.5.5 that consists in an arbitrary file upload in ‘/media/api’ parameter via p…
• CVE-2024-2001TRUNG BÌNH 5.4A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload …
• CVE-2023-41564TRUNG BÌNH 6.1An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via upl…