writeups.xyz / Multiple Vulnerabilities In Cockpit CMS <= V2.5.2

Submitter : c2a

Date: 30 June 2023

Bounty : undisclosed

Vulnerabilities :

• CSRF
• Unrestricted File Upload
• RCE
• XSS
• IDOR
• Security Code Review

Programs :

• Cockpit CMS

Authors :

• GhostCcamm (@GhostCcamm)

Link :
https://www.ghostccamm.com/blog/multi_cockpit_vulns/