CVE-2017-6087

PoC —

CVSS 3.0

8.8 high

EPSS

7%p94

Published

Mar 24, 2017 (Mar 24, 2017)

Modified

Jun 17, 2026

Description

EyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the selected_events[] parameter in the (1) acknowledge, (2) delete, or (3) ownDisown function in module/monitoring_ged/ged_functions.php or the (4) module parameter to module/index.php.

Vendors: eonweb project
Products: eonweb
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.2%)

In the news0 stories

No ingested article mentions this CVE yet.