Cross site scripting

A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...

PT-2017-13880

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description A persistent XSS issue in the EyesOfNetwork web interface allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to the "module/admin...

PT-2017-13448

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows remote command execution via shell metacharacters in a hosts cacti array parameter to the "module/admin device/index.php" API endpoint. Recommendations For...