jsj730sos/cve

Releases0

cve

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-16000 ↗	Oct 29, 2017Sunday, 29 October 2017, 17:29	—	6.5 MEDIUM
SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacity_per_label/index.php.
CVE-2017-15933 ↗	Oct 27, 2017Friday, 27 October 2017, 19:29	—	6.5 MEDIUM
SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacity_per_device/index.php.
CVE-2017-15880 ↗	Oct 24, 2017Tuesday, 24 October 2017, 22:29	—	6.5 MEDIUM
SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php (for insert_group and update_group).
CVE-2017-15188 ↗	Oct 11, 2017Wednesday, 11 October 2017, 01:32	—	3.5 LOW
A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admin_device/index.php.
CVE-2017-14983 ↗	Oct 3, 2017Tuesday, 3 October 2017, 01:29	—	3.5 LOW
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/admin_conf/index.php.
CVE-2017-14984 ↗	Oct 3, 2017Tuesday, 3 October 2017, 01:29	—	3.5 LOW
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the bp_name parameter to /module/admin_bp/add_services.php.
CVE-2017-14985 ↗	Oct 3, 2017Tuesday, 3 October 2017, 01:29	—	3.5 LOW
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/module_frame/index.php.