CVE-2017-14402

Critical

Published: 13/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the user_name parameter to module/admin_user/add_modify_user.php in the 'ACCOUNT CREATION' section, related to lack of input validation in include/function.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to implement proper input validation and update to the latest version of the software to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section, related to lack of input validation in include/function.php.