CVE-2017-15188

A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admin_device/index.php.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2017-10-11

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Eyesofnetwork (Eyesofnetwork)

References

• https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_device_index%20stored%20XSS