The vulnerability of the nagios_path parameter (lilac/export.php) of the monitoring software for systems and networks, EyesOfNetwork (EON), allows a perpetrator to execute arbitrary commands.

The vulnerability of the nagiospath parameter lilac/export.php of the monitoring software for systems and networks, EyesOfNetwork EON, is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker ...

CVE-2021-33525

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution by authenticated users via shell metacharacters in the nagiospath parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell...

EyesOfNetwork 操作系统命令注入漏洞

eonweb is the web interface for EyesOfNetwork. A remote command execution vulnerability exists in EyesOfNetwork eonweb version 5.3-11 and earlier. An attacker can exploit this vulnerability to execute commands via shell metacharacters in the nagiospath parameter of lilac/export.php...