EyesOfNetwork (EON) 5.3-0
Approved changes feed: RSS · Atom
cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:*
part: a version: 5.3-0 update: *
| Vendor | Eyesofnetwork (3d1c26bb-f92b-5479-b25c-e187da0068a9) |
|---|---|
| Product | Eyesofnetwork (18df0076-784d-5d9e-8b07-7a16548236a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/eyesofnetworkcommunity/eonweb |
purl2cpe | 2026-06-01 10:17:41.522573 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-8657 |
vulnerable | 2026-06-08 05:27:17.129874 |
Details available
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.
Published: 2020-02-06T17:48:08.000Z
Updated: 2025-10-21T23:35:52.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8656 |
vulnerable | 2026-06-08 05:27:17.129297 |
Details available
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.
Published: 2020-02-06T23:47:30.000Z
Updated: 2024-08-04T10:03:46.318Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8655 |
vulnerable | 2026-06-08 05:27:17.128854 |
Details available
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
Published: 2020-02-06T23:58:09.000Z
Updated: 2025-10-21T23:35:52.277Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8654 |
vulnerable | 2026-06-08 05:27:17.128087 |
Details available
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.
Published: 2020-02-06T23:55:10.000Z
Updated: 2024-08-04T10:03:46.328Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.