CVE-2017-14401

CRITICAL 9.8CVE-2017-14401 · Published 13/09/2017 · updated 17/06/2026

In short

CVE-2017-14401 is a CRITICAL (CVSS 9.8) vulnerability affecting eyesofnetwork (eyesofnetwork).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eyesofnetwork eyesofnetwork	`= 5.1-0`	No fix yet

Description

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT UPDATE" section.

References

sstrunk.com/cve/module_admin_user_add_modify_user.html · Exploit

More vulnerabilities in eyesofnetwork

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

eyesofnetwork

= 5.1-0

No fix yet

More vulnerabilities in eyesofnetwork

See all →