CVE-2017-14118

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

CVE-2017-14118

CVE-2017-14118 affects EyesOfNetwork (eonweb) 5.1-0. The vulnerability arises in module/tool_all/tools/interface.php, which fails to properly restrict exec calls. An attacker can supply shell metacharacters in the host_list parameter to module/tool_all/select_tool.php to execute arbitrary command...