CVE-2020-8654

PoC ×3—

CVSS 3.1

8.8 high

EPSS

91%p100

Published

Feb 7, 2020 (Feb 7, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.

Vendors: eyesofnetwork
Products: eyesofnetwork
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (91.2%)

In the news0 stories

No ingested article mentions this CVE yet.