CVE-2020-27886

Опубликовано: 29 окт. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the username_available function of the includes/functions.php file (which is called by login.php).

Ссылки

http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso
Patch
Product
Vendor Advisory
https://github.com/EyesOfNetworkCommunity/eonweb/issues/76
Third Party Advisory
https://www.eyesofnetwork.com/en
Product
http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso
Patch
Product
Vendor Advisory
https://github.com/EyesOfNetworkCommunity/eonweb/issues/76
Third Party Advisory
https://www.eyesofnetwork.com/en
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eyesofnetwork:eyesofnetwork:*:*:*:*:*:*:*:*

Версия от 5.3-7 (включая) до 5.3-8 (включая)

EPSS

Процентиль: 84%

0.0209

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-mw66-fjc2-5mm7

github

больше 3 лет назад