CVE-2017-14118 | BDVDB-2026-89896 Detail

Description#

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the host_list parameter to module/tool_all/select_tool.php.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-09-03Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.