CVEs-PoC/2020/CVE-2020-35846.md

CVE-2020-35846

Description

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

POC

Reference

• http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html

Github

• https://github.com/0z09e/CVE-2020-35846
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/JohnHammond/CVE-2020-35846
• https://github.com/Konstantinos-Papanagnou/CMSpit
• https://github.com/Live-Hack-CVE/CVE-2020-35846
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/w33vils/CVE-2020-35847_CVE-2020-35848