Published: 28/02/2020 Updated: 23/02/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

An issue exists in EyesOfNetwork eonweb 5.1 up to and including 5.3 prior to 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated malicious user to perform various tasks such as authentication bypass via the user_id field in a cookie.

Vulnerable Product	Search on Vulmon	Subscribe to Product
eyesofnetwork eyesofnetwork

EyesOfNetwork 5.1 to 5.3 exploits

eonrce EyesOfNetwork 51 to 53 exploits Theses two exploit files uses the following CVE's: CVE_number__ Description CVE-2020-8654 Discovery module to allows to run arbitrary OS commandsWe were able to run the id command with the following payload in the target field : ;id # CVE-2020-8655 LPE via nmap NSE scriptAs the apache user is allowed to run nmap as root, w

CWE-89 https://github.com/EyesOfNetworkCommunity/eonweb/issues/51 https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3 https://nvd.nist.gov https://github.com/h4knet/eonrce

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-9465

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect