4 matches found
CVE-2020-27887
An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmapbinary parameter to lilac/autodiscovery.php...
CVE-2020-27887
EyesOfNetwork 5.3–5.3-8 is affected. An authenticated web user with sufficient privileges can abuse the AutoDiscovery module to execute arbitrary operating system commands via the nmap_binary parameter to lilac/autodiscovery.php, indicating a command-injection style vulnerability with high impact...
CVE-2020-27887: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmapbinary parameter to lilac/autodiscovery.php...
CVE-2020-8654: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/moduleframe/index.php autodiscovery.php target field...