CVE-2022-38357: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/moduleframe/index.php...

EyesOfNetwork web interface cross-site scripting vulnerability

EyesOfNetwork "EON" is an open source solution that combines practical ITIL processes with a technical interface that allows its workday program. A cross-site scripting vulnerability exists in the EyesOfNetwork web interface, which allows a remote authenticated user to inject arbitrary web script...

CVE-2017-14985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...