Brian Ombongi

2 exploits Active since Dec 2020

CVE-2020-35847 EXPLOITDB CRITICAL python WORKING POC

Cockpit CMS NoSQLi to RCE

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

CVSS 9.8

View Code

CVE-2020-35848 EXPLOITDB CRITICAL python WORKING POC

Agentejo Cockpit < 0.11.2 - SQL Injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

CVSS 9.8

View Code