CVE-2017-14985

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...

CVE-2017-14985

The EyesOfNetwork web interface (eonweb) is affected by CVE-2017-14985, an XSS in 5.1-0 that allows remote authenticated users to inject arbitrary script/HTML via the url parameter to module/module_frame/index.php. Reported impact includes reflected/script injection with low to medium severity (C...