High severity8.8OSV Advisory· Published Sep 3, 2017· Updated Jun 17, 2026
CVE-2017-14118
CVE-2017-14118
Description
In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the host_list parameter to module/tool_all/select_tool.php.
Affected products
34.3-0, 5.1-0+ 1 more
- (no CPE)range: 4.3-0, 5.1-0
- cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.1-0:*:*:*:*:*:*:*
- Range: = 5.1-0
Patches
Vulnerability mechanics
References
1- kk.whitecell-club.org/index.php/archives/220/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.