cockpit-hq/cockpit vulnerabilities (Packagist)
26 vulnerabilities.
cockpit-hq/cockpitPackagistCockpit CMS 2.14.0 Stored XSS via Set Field Display Template5.1 Mediumcockpit-hq/cockpitPackagistCockpit is vulnerable to directory traversal6.5 Mediumcockpit-hq/cockpitPackagistCockpit is vulnerable to arbitrary code execution9.8 Criticalcockpit-hq/cockpitPackagistCockpit Vulnerable to Unrestricted Upload of File with Dangerous Type8.8 Highcockpit-hq/cockpitPackagistCockpit-HQ Cockpit Asset Handler/Aggregate data query logic injection5.3 Mediumcockpit-hq/cockpitPackagistCockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()7.7 Highcockpit-hq/cockpitPackagistCockpit save cross site scripting5.1 Mediumcockpit-hq/cockpitPackagistCockpit Arbitrary File Upload8.7 Highcockpit-hq/cockpitPackagistUnrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from Agentejo9.8 Criticalcockpit-hq/cockpitPackagistCross-Site Scripting vulnerability in Cockpit CMS5.5 Mediumcockpit-hq/cockpitPackagistCockpit CMS arbitrary file upload vulnerability6.1 Mediumcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit6.1 Mediumcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.3 Highcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit8.3 Highcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit6.8 Mediumcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.1 Highcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.3 Highcockpit-hq/cockpitPackagistCross-site Scripting (XSS) - Stored in cockpit-hq/cockpit8.3 Highcockpit-hq/cockpitPackagistPHP Remote File Inclusion in cockpit-hq/cockpit9.9 Criticalcockpit-hq/cockpitPackagistCockpit CMS Cross-Site Request Forgery vulnerability8.8 Highcockpit-hq/cockpitPackagistCockpit CMS vulnerable to incorrect access control7.5 Highcockpit-hq/cockpitPackagistUnrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit7.2 Highcockpit-hq/cockpitPackagistUse of Platform-Dependent Third Party Components in cockpit-hq/cockpit4.0 Mediumcockpit-hq/cockpitPackagistImproper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit4.0 Mediumcockpit-hq/cockpitPackagistPrivilege Chaining in cockpit-hq/cockpit5.3 Mediumcockpit-hq/cockpitPackagistImproper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit9.8 Critical