Code injection

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...

CVE-2017-14118

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2017-14119

The CVE-2017-14119 vulnerability affects EyesOfNetwork (eonweb) 5.1-0, specifically in module/tool_all/tools/snmpwalk.php, where popen calls are not properly restricted. This allows remote attackers to execute arbitrary commands by injecting shell metacharacters into a parameter. The issue is des...

CVE-2017-14119

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...

CVE-2017-14118

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2017-14118

CVE-2017-14118 affects EyesOfNetwork (eonweb) 5.1-0. The vulnerability arises in module/tool_all/tools/interface.php, which fails to properly restrict exec calls. An attacker can supply shell metacharacters in the host_list parameter to module/tool_all/select_tool.php to execute arbitrary command...

PT-2017-13262

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface eonweb versions 5.1-0 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the host list parameter to "module/tool all/select tool.php". This is due to the improper...

PT-2017-13263

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface eonweb versions 5.1-0 Description The issue is related to the module tool all/tools/snmpwalk.php in the EyesOfNetwork web interface, which does not properly restrict popen calls. This allows remote attackers to...

CVE-2017-14118: Improper Neutralization of Special Elements used in an OS Command

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2017-14119: Improper Neutralization of Special Elements used in an OS Command

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...

CVE-2017-13780

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

CVE-2017-13780

The CVE-2017-13780 entry concerns EyesOfNetwork web interface (eonweb) 5.1-0. Affected component: module/admin_conf/download.php parameter. Root cause: directory traversal allows reading arbitrary files. Impact is read access to files outside intended scope. Public references across NVD/CNVD/OSV ...

PT-2017-13096

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows directory traversal attacks, enabling the reading of arbitrary files. This is achieved via the file parameter in the module/admin conf/download.php API endpoint...

CVE-2017-13780: Improper Limitation of a Pathname to a Restricted Directory

The EyesOfNetwork web interface aka eonweb 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/adminconf/download.php file parameter...

EyesOfNetwork SQL Injection Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. An SQL injection vulnerability exists in eonweb in EON version 5.1. A remote...

CVE-2017-1000060: Improper Neutralization of Special Elements used in an SQL Command

EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...

CVE-2017-1000060

EyesOfNetwork (EON) 5.1 has an unauthenticated SQL Injection in the web interface (eonweb) that leads to remote root. The vulnerability is described across multiple connected records as existing in EyesOfNetwork 5.1-0 and is related to CVE-2017-1000060. The root cause is an SQL injection vulnerab...

CVE-2017-1000060

EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root...

EyesOfNetwork (EON) 5.1 SQL Injection

Exploit Title: EyesOfNetwork EON 5.1 Unauthenticated SQL Injection in eonweb leading to remote root Google Dork: intitle:EyesOfNetwork intext:"sponsored by AXIANS" Date: 29/03/2017 Exploit Author: Dany Bach Vendor Homepage: https://www.eyesofnetwork.com/ Software Link:...

EyesOfNetwork (EON) 5.0 - Remote Code Execution

CVE-2017-6087 EON 5.0 Remote Code Execution Description EyesOfNetwork "EON" is an OpenSource network monitoring solution. Remote Code Execution authenticated The Eonweb code does not correctly filter arguments, allowing authenticated users to execute arbitrary code. CVE ID: CVE-2017-6087 Access...