CVE-2020-27887

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmapbinary parameter to lilac/autodiscovery.php...

CVE-2020-27887

EyesOfNetwork 5.3–5.3-8 is affected. An authenticated web user with sufficient privileges can abuse the AutoDiscovery module to execute arbitrary operating system commands via the nmap_binary parameter to lilac/autodiscovery.php, indicating a command-injection style vulnerability with high impact...

CVE-2020-27887: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmapbinary parameter to lilac/autodiscovery.php...

PT-2020-16826

Name of the Vulnerable Software and Affected Versions EyesOfNetwork versions 5.3 through 5.3-8 Description An issue allows an authenticated web user with sufficient privileges to abuse the AutoDiscovery module and run arbitrary OS commands. This is achieved via the nmap binary parameter to...

CVE-2020-8654

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/moduleframe/index.php autodiscovery.php target field...

CVE-2020-8654: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/moduleframe/index.php autodiscovery.php target field...