CyberSec.Space Logo
Back to CVE Browser

CVE-2017-14402

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1470%
EPSS Percentile28.92th
PublishedSep 13, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section, related to lack of input validation in include/function.php.

Affected Platforms (CPE)

📦
Eyesofnetwork

Eyesofnetwork

= 5.1-0

References & Advisories

🔗 http://www.sstrunk.com/cve/eonweb_include_function.html
🔗 http://www.sstrunk.com/cve/eonweb_include_function.html

Related Vulnerabilities

CVE-2017-142529.8

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.

CVE-2017-10000609.8

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

CVE-2017-142479.8

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue t...

CVE-2017-144039.8

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php.