CVE-2017-16000

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

PT-2017-14353

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting the graph parameter in the /module/capacity per label/index.php API endpoint...