EyesOfNetwork eonweb Remote Command Execution Vulnerability

eonweb is the web interface for EyesOfNetwork. A remote command execution vulnerability exists in EyesOfNetwork eonweb version 5.3-11 and earlier. An attacker can exploit this vulnerability to execute commands via shell metacharacters in the nagiospath parameter of lilac/export.php...

CVE-2021-33525

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution by authenticated users via shell metacharacters in the nagiospath parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell...

PT-2021-3233

Name of the Vulnerable Software and Affected Versions EyesOfNetwork eonweb versions 5.3-11 Description The issue is related to the nagios path parameter in lilac/export.php, which does not properly neutralize special elements used in operating system commands. This can be exploited by a remote...

CVE-2021-33525: Improper Neutralization of Special Elements used in an OS Command

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution by authenticated users via shell metacharacters in the nagiospath parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell...