Lucene search
+L

CVE-2020-8655

🗓️ 06 Feb 2020 23:58:09Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 1150 Views🌐 WEB

An issue in EyesOfNetwork 5.3 allows apache user to escalate privileges via crafted NSE script for nmap 7

Related
Detection
Refs
Paths
NVD
ParameterPositionPathDescriptionCWE
usernamequery parameonapi/getApiKeySQL injection on getApiKey to bypass authentication and obtain API keyCWE-269
user_namerequest bodyeonapi/createEonUserCreate a new EON user via API with admin privileges; possible insecure API usageCWE-269
user_passwordrequest bodyeonapi/createEonUserCreate a new EON user via API with admin privileges; possible insecure API usageCWE-269
apiKeyquery parameonapi/createEonUserAPI key based authentication parameters in createUser callCWE-269
usernamequery parameonapi/createEonUserAPI key based authentication parameters in createUser callCWE-269
user_namerequest bodyeonapi/deleteEonUserDelete EON user via API; potential unauthorized user cleanup pathCWE-269
apiKeyquery parameonapi/deleteEonUserAPI key based authentication in delete user callCWE-269
usernamequery parameonapi/deleteEonUserAPI key based authentication in delete user callCWE-269
requestrequest bodylilac/autodiscovery.phpAutoDiscovery job creation vulnerable to command injection via target parameter (command execution using crafted NSE script)CWE-269
job_namerequest bodylilac/autodiscovery.phpAutoDiscovery job creation vulnerable to command injection via target parameter (command execution using crafted NSE script)CWE-269
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:26Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.8
CVSS 29.3
EPSS0.60075
SSVC
1150