CVE-2017-14402

The EyesOfNetwork web interface (eonweb) version 5.1-0 is affected by an SQL injection vulnerability in the include/function.php path, exploitable via the user_name parameter to module/admin_user/add_modify_user.php (ACCOUNT CREATION). Root cause: inadequate input validation in include/function.p...

CVE-2017-14404

The EyesOfNetwork web interface aka eonweb 5.1-0 allows local file inclusion via the toollist parameter aka the urltool variable to module/toolall/selecttool.php, as demonstrated by a toollist=php://filter/ substring...

CVE-2017-14402

The EyesOfNetwork web interface aka eonweb 5.1-0 has SQL injection via the username parameter to module/adminuser/addmodifyuser.php in the "ACCOUNT CREATION" section, related to lack of input validation in include/function.php...

CVE-2017-14404

Affected software: EyesOfNetwork web interface (eonweb) 5.1-0. Vulnerability type: Local File Inclusion via the tool_list parameter (aka url_tool) to module/tool_all/select_tool.php. Root cause / vector: Untrusted tool_list input can be used to include local files (demonstrated by tool_list=php:/...

CVE-2017-14403

The EyesOfNetwork web interface (eonweb) 5.1-0 is affected by a SQL injection in the term parameter to module/admin_group/search.php. The vulnerability allows remote attackers to craft input to cause arbitrary SQL commands execution. This is described across multiple sources (NVD, CNVD, OSV, CVE ...

CVE-2017-14401

The EyesOfNetwork web interface (eonweb) 5.1-0 contains a SQL injection vulnerability in the USERNAME column, exploitable via the user_name parameter to module/admin_user/add_modify_user.php within the ACCOUNT UPDATE section. This allows an attacker to construct arbitrary SQL commands, enabling d...

CVE-2017-14403

The EyesOfNetwork web interface aka eonweb 5.1-0 has SQL injection via the term parameter to module/admingroup/search.php...

CVE-2017-14252

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

CVE-2017-14247

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

CVE-2017-14247

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

CVE-2017-14252

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

Sql injection

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

Sql injection

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

CVE-2017-14252

EyesOfNetwork web interface (eonweb) 5.1-0 is affected by a SQL injection via the group_id cookie to side.php. Multiple sources (NVD, CNVD, OSV, CVE lists, OpenVAS entry) describe an SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands, with impact on c...

CVE-2017-14252

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the groupid cookie to side.php...

CVE-2017-14247

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

CVE-2017-14247

The CVE-2017-14247 issue affects EyesOfNetwork (EON) web interface, eonweb, version 5.1-0, via an SQL injection in header.php triggered by the user_id cookie. Connected sources corroborate a SQL injection path in eonweb that can be exploited remotely, with descriptions indicating unauthenticated ...

EyesOfNetwork web interface command execution vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A security vulnerability exists ...

CVE-2017-14118

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2017-14119

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...