SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060.
References
Link | Resource |
---|---|
http://www.sstrunk.com/cve/eonweb_Translator.class.html | Exploit Third Party Advisory |
Configurations
Information
Published : 2017-09-11 02:29
Updated : 2021-02-23 07:06
NVD link : CVE-2017-14247
Mitre link : CVE-2017-14247
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
eyesofnetwork
- eyesofnetwork