CVE-2017-16000

SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacity_per_label/index.php.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2017-10-29

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Eyesofnetwork (Eyesofnetwork)

References

• https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_label_index.php-SQL%20injection%20vulnerability