Back to CVE Browser

CVE-2020-9465

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile25.25th

PublishedFeb 28, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.

Affected Platforms (CPE)

📦

Eyesofnetwork

Eyesofnetwork

>= 5.1 and < 5.3-3

References & Advisories

🔗 https://github.com/EyesOfNetworkCommunity/eonweb/issues/51

🔗 https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3

🔗 https://github.com/EyesOfNetworkCommunity/eonweb/issues/51

🔗 https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3

Related Vulnerabilities

CVE-2020-278869.8

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowin...

CVE-2020-86579.8

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_funct...

CVE-2020-86569.8

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated a...

CVE-2021-275149.8

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authe...