EyesOfNetwork web interface 'host' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. The EyesOfNetwork web interface aka eonweb is one of these web interfaces...

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

PT-2017-14292

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting the host parameter in the module/capacity per device/index.php API endpoint...