ID de Prueba:	1.3.6.1.4.1.25623.1.0.143506
Categoría:	Web application abuses
Título:	Eyes Of Network (EON) SQL Injection Vulnerability (Active Check)
Resumen:	Eyes Of Network (EON) is prone to an SQL injection vulnerability over the API.
Descripción:	Summary: Eyes Of Network (EON) is prone to an SQL injection vulnerability over the API. Vulnerability Insight: Eyes Of Network (EON) is prone to an SQL injection vulnerability allowing an unauthenticated attacker to perform various tasks such as authentication bypass. Affected Software/OS: Eyes Of Network API version 2.4.2 and probably prior. Solution: See the referenced vendor advisories for a solution. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-8656 http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html https://github.com/EyesOfNetworkCommunity/eonapi/issues/16
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.