Skip to contentAgentejo Cockpit vulnerabilities
- agentejo cockpit cms, cockpit cms +1 moreagentejo Cockpit CMS htaccess config.yaml YAMLLoad file accessCVE-2026-135336.9 Medium
- agentejo cockpitCockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()CVE-2026-31891Public exploitFix available7.7 High
- agentejo cockpitCockpit save cross site scriptingCVE-2025-7053Fix available5.1 Medium
- agentejo cockpit, cockpit cms, cockpit cms +2 moreUnrestricted Upload of File with Dangerous Type vulnerability on Cockpit CMS from AgentejoCVE-2024-4825Fix available9.8 Critical
- agentejo cockpit, cockpit cms +1 moreCross-Site Scripting vulnerability in Cockpit CMSCVE-2024-20015.5 Medium
- agentejo cockpitCockpit CMS arbitrary file upload vulnerabilityCVE-2023-41564Public exploit6.1 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpitCVE-2023-44516.1 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitCVE-2023-44338.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Reflected in cockpit-hq/cockpitCVE-2023-44328.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitCVE-2023-4422Fix available6.8 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitCVE-2023-43958.1 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitCVE-2023-43218.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreCross-site Scripting (XSS) - Stored in cockpit-hq/cockpitCVE-2023-4196Fix available8.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 morePHP Remote File Inclusion in cockpit-hq/cockpitCVE-2023-4195Fix available9.9 Critical
- agentejo cockpitCockpit CMS Cross-Site Request Forgery vulnerabilityCVE-2023-37650Fix available8.8 High
- agentejo cockpitCockpit CMS vulnerable to incorrect access controlCVE-2023-37649Fix available7.5 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreUnrestricted Upload of File with Dangerous Type in cockpit-hq/cockpitCVE-2023-1313Fix available7.2 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreUse of Platform-Dependent Third Party Components in cockpit-hq/cockpitCVE-2023-11604.0 Medium
- agentejo cockpit, microweber +1 moreCockpit vulnerable to Cross-site ScriptingCVE-2021-328576.1 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreImproper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpitCVE-2023-0780Fix available4.0 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 morePrivilege Chaining in cockpit-hq/cockpitCVE-2023-0759Fix available5.3 Medium
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreImproper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpitCVE-2022-2818Fix available9.8 Critical
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreInsufficient Session Expiration in cockpit-hq/cockpitCVE-2022-2713Fix available8.6 High
- agentejo cockpitCockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command...CVE-2020-35131EPSS 50.3%9.8 Critical
- agentejo cockpitAgentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.CVE-2020-35846Public exploitEPSS 93.3%9.8 Critical
- agentejo cockpitAgentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword...CVE-2020-35848Public exploitEPSS 74.6%9.8 Critical
- agentejo cockpitAgentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword...CVE-2020-35847Public exploitEPSS 98.2%9.8 Critical
- agentejo cockpitAn issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter...CVE-2020-144086.1 Medium
- agentejo cockpitAgentejo Cockpit performs actions on files without appropriate validation and therefore allows an...CVE-2018-155409.8 Critical
- agentejo cockpitAgentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API...CVE-2018-155398.8 High
- agentejo cockpitAgentejo Cockpit has multiple Cross-Site Scripting vulnerabilities.CVE-2018-155386.1 Medium
- agentejo cockpitSSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary...CVE-2017-146119.1 Critical