CVE-2020-35848 | Agentejo Cockpit up to 0.11.1 Controller/Auth.php newpassword sql injection (EDB-50185)

A vulnerability was found in Agentejo Cockpit up to 0.11.1. It has been classified as critical. This affects the function newpassword of the file Controller/Auth.php. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2020-35848. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.