EyesOfNetwork web interface 5.1-0 vulnerabilities
4 known CVE vulnerabilities in EyesOfNetwork web interface 5.1-0, translated and rated.
- CVE-2017-13780High
The EyesOfNetwork web interface version 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter.
- CVE-2017-14403Critical
The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the term parameter in module/admin_group/search.php.
- CVE-2017-14402Critical
The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the user_name parameter to module/admin_user/add_modify_user.php in the 'ACCOUNT CREATION' section, related to lack of input validation in include/function.php.
- CVE-2017-14401Critical
The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the user_name parameter to module/admin_user/add_modify_user.php in the 'ACCOUNT UPDATE' section.