CVE Catalog

CVE-2017-14247

Critical
Published: Translated: NVD NIST

Summary

SQL Injection exists in the EyesOfNetwork web interface (eonweb) 5.1-0 via the user_id cookie to header.php.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.

Recommendation

It is recommended to update to the latest version of the software and implement input data filtering to minimize the risk of attack.

Original NVD description (English source)

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS