Approved changes feed: RSS · Atom

cpe:2.3:a:eyeofnetwork:eyes_of_network_web:5.3:*:*:*:*:*:*:*

part: a version: 5.3 update: *

VendorEyeofnetwork (5cb11f00-838c-5c3a-895c-0003f5aab738)
ProductEyes Of Network Web (979bfde9-b71e-53db-b6ae-dbdf05b9d363)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38359 vulnerable 2026-06-08 05:47:16.156719 Details available
Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protections. An attacker can, for instance, delete the admin user by directing an authenticated user to the URL https://<target-address>/module/admin_user/index.php?DataTables_Table_0_length=10&user_selected%5B%5D=1&user_mgt_list=delete_user&action=submit by means of a crafted link.
Published: 2022-08-15T22:05:17.000Z
Updated: 2024-08-03T10:54:03.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38358 vulnerable 2026-06-08 05:47:16.156380 Details available
Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/admin_notifiers/rules.php and /module/report_event/indext.php via the parameters rule_notification, rule_name, and rule_name_old, and at /module/admin_user/add_modify_user.php via the parameters user_name and user_email.
Published: 2022-08-15T22:04:14.000Z
Updated: 2024-08-03T10:54:03.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38357 vulnerable 2026-06-08 05:47:16.155351 Details available
Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php.
Published: 2022-08-15T22:07:49.000Z
Updated: 2024-08-03T10:54:03.231Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.