Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88795
HistorySep 29, 2022 - 12:00 a.m.

EyesOfNetwork SQL Injection Vulnerability

2022-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
eyesofnetwork
sql injection
vulnerability
eon
it monitoring
open source
community
business process configuration
pop-ups
validation
sql commands
database data
cnvd

0.001 Low

EPSS

Percentile

50.2%

EyesOfNetwork (EON) is an open source, free IT monitoring solution from the EyesOfNetwork community. The solution provides business process configuration tools, generates pop-ups when events occur in the active queue, and other features.EyesOfNetwork (EON) 5.3.11 and earlier versions are vulnerable to SQL injection, which stems from the application’s lack of validation of externally entered SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal database data.

CPENameOperatorVersion
eyesofnetwork eyesofnetworkle5.3.11

0.001 Low

EPSS

Percentile

50.2%

Related for CNVD-2022-88795