EyesOfNetwork web interface RCE vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A security vulnerability exists ...

CVE-2017-14405

The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...

CVE-2017-14405

The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...

CVE-2017-14405: Improper Neutralization of Special Elements used in an OS Command

The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...