CVE-2017-14404

Affected software: EyesOfNetwork web interface (eonweb) 5.1-0. Vulnerability type: Local File Inclusion via the tool_list parameter (aka url_tool) to module/tool_all/select_tool.php. Root cause / vector: Untrusted tool_list input can be used to include local files (demonstrated by tool_list=php:/...