CVE-2020-35848

This exploit demonstrates NoSQL injection in Cockpit CMS 0.11.1 to enumerate users, extract password reset tokens, and reset passwords. It leverages the `$func` operator to dump sensitive data via `var_dump`.

This repository contains a functional exploit for CVE-2020-35848, demonstrating a NoSQL injection vulnerability in Agentejo Cockpit CMS < 0.11.2. The exploit automates username enumeration, token extraction, password reset, and admin login to achieve remote code execution via admin-accessible endpoints.