CyberSec.Space Logo
Back to CVE Browser

CVE-2017-14247

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0610%
EPSS Percentile18.95th
PublishedSep 11, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060.

Affected Platforms (CPE)

📦
Eyesofnetwork

Eyesofnetwork

= 5.1-0

References & Advisories

🔗 http://www.sstrunk.com/cve/eonweb_Translator.class.html
🔗 http://www.sstrunk.com/cve/eonweb_Translator.class.html

Related Vulnerabilities

CVE-2017-142529.8

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.

CVE-2017-144039.8

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php.

CVE-2017-10000609.8

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

CVE-2017-144029.8

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_u...