EDB-48025
PoCEyesOfNetwork 5.3 - Remote Code Execution
view exploit source exploit_dbtype webappsauthor Clément Billacpublished 2020-02-07catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-8656US | critical9.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentic… | ||||
| CVE-2020-8655US | high7.8OT critical | KEV | ||
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root… | ||||
| CVE-2020-8654US | high8.8 | Exploit | ||
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan