EDB-48025
PoCEyesOfNetwork 5.3 - Remote Code Execution
Exploit ansehen Quelle exploit_dbTyp webappsAutor Clément Billacveröffentlicht 2020-02-07Katalog exploit_db
01
ausgenutzte CVEs (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8656US | critical9.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentic… | ||||
| CVE-2020-8655US | high7.8OT kritisch | KEV | ||
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root… | ||||
| CVE-2020-8654US | high8.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan