CVEブラウザに戻る

CVE-2020-27886

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0970%

EPSS Percentile12.52th

Published2020年10月29日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the username_available function of the includes/functions.php file (which is called by login.php).

Affected Platforms (CPE)

📦

Eyesofnetwork

Eyesofnetwork

>= 5.3-7 and <= 5.3-8

References & Advisories

🔗 http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso

🔗 https://github.com/EyesOfNetworkCommunity/eonweb/issues/76

🔗 https://www.eyesofnetwork.com/en

🔗 http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso

🔗 https://github.com/EyesOfNetworkCommunity/eonweb/issues/76

🔗 https://www.eyesofnetwork.com/en

関連する脆弱性情報

CVE-2020-94659.8

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection...

CVE-2020-86579.8

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_funct...

CVE-2020-86569.8

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated a...

CVE-2021-275149.8

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authe...