CVE-2017-15188

A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...

CVE-2017-15188: Improper Neutralization of Input During Web Page Generation

A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...

CVE-2017-14405: Improper Neutralization of Special Elements used in an OS Command

The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...