CVE Feed

    Dashboard / CVE / CVE-2017-6088

    CVE-2017-6088

    Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2) display, (3) search, or (4) equipment parameter to module/monitoring_ged/ged_functions.php or the (5) type parameter to monitoring_ged/ajax.php.

    Published:Apr 11, 2017
    Last Modified:Apr 20, 2025
    EPS:Apr 11, 2017
    EPSS Score:0.06903
    CVSS Score:7.2

    Affected Products

    Vendor
    Eyesofnetwork
    Product
    Eyesofnetwork

    Exploits

    http://www.openwall.com/lists/oss-security/2017/03/23/4https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/https://www.exploit-db.com/exploits/41747/http://www.openwall.com/lists/oss-security/2017/03/23/4https://sysdream.com/news/lab/2017-03-14-cve-2017-6088-eon-5-0-multiple-sql-injection/https://www.exploit-db.com/exploits/41747/https://www.exploit-db.com/exploits/41747

    Related CVEs

    CVE-2022-41572 (CVSS 9.8) — An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the…
    CVE-2022-41571 (CVSS 9.8) — An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.…
    CVE-2022-41570 (CVSS 9.8) — An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.…
    CVE-2021-40643 (CVSS 9.8) — EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration pa…
    CVE-2022-24612 (CVSS 5.4) — An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, re…
    CVE-2021-33525 (CVSS 8.8) — EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacha…
    CVE-2021-27513 (CVSS 8.8) — The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php f…
    CVE-2021-27514 (CVSS 9.8) — EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged f…
    CVE-2020-27887 (CVSS 8.8) — An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileg…
    CVE-2020-27886 (CVSS 9.8) — An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQ…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High