Vendor
Cockpit CMS
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Cockpit CMS Cockpit CMS - Unrestricted File Upload
An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The allowed_uploads configuration defaults to wildcard (*) and uploaded files are s…