Agentejo Cockpit /auth/requestreset < 0.11.2 NoSQL注入(CVE-2020-35847)

2022-10-19 Cockpit PoC No

0.11.2之前的Agentejo Cockpit允许通过Auth控制器的Controller/Auth.phpresetpassword函数进行NoSQL注入

None yet. Search at https://trap.biu.life/?ref=rss