CVE-2017-14402

The EyesOfNetwork web interface (eonweb) version 5.1-0 is affected by an SQL injection vulnerability in the include/function.php path, exploitable via the user_name parameter to module/admin_user/add_modify_user.php (ACCOUNT CREATION). Root cause: inadequate input validation in include/function.p...