CVE-2020-35846 PoC — Agentejo Cockpit SQL注入漏洞

Source

https://github.com/JohnHammond/CVE-2020-35846

Associated Vulnerability

Title: Agentejo Cockpit SQL注入漏洞 (CVE-2020-35846)
Description:Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

Description

Python PoC for CVE-2020-35846 targeting Cockpit 0.11.1

Readme

# CVE-2020-35846 - Leak Cockpit Usernames PoC

> John Hammond | Sunday, July 25th, 2021

--------------------------------

Proof-of-concept Python script to leak Cockpit usernames with CVE-2020-35846.

![image](https://user-images.githubusercontent.com/6288722/126888786-2d37a4c6-47bc-4712-91ea-8e8c2a94fc67.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →