VYPR
← All advisories
High severity8.8OSV Advisory· Published Sep 3, 2017· Updated Jun 17, 2026

CVE-2017-14118

CVE-2017-14118

Description

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the host_list parameter to module/tool_all/select_tool.php.

Affected products

3
  • Eyesofnetwork/eonwebllm-fuzzy
    Range: = 5.1-0
  • Eyesofnetwork/Eyesofnetwork2 versions
    cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*
    • (no CPE)range: 4.3-0, 5.1-0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.