Sploitus

CVE-2020-8656

8 known exploits for CVE-2020-8656

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.

Affected products
Eyesofnetwork, Eyesofnetwork Api
Eyesofnetwork
= 5.3-0
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
84.6% (100th percentile)
Weakness
CWE-89
NVD status
Modified
Published
2020-02-06
CVE-2020-8656 at NVD
Authoritative description, scoring and affected products

8 known exploits for CVE-2020-8656

Proof-of-concept code and exploit modules indexed by Sploitus

EyesOfNetwork - AutoDiscovery Target Command Execution (Metasploit)
2020-03-05 MetasploitEXPLOITDBRuby
EyesOfNetwork AutoDiscovery Target Command Execution Exploit
2020-03-04 metasploitZDTRuby
EyesOfNetwork AutoDiscovery Target Command Execution
2020-03-03 Brendan ColesPACKETSTORMRuby
EyesOfNetwork 5.1-5.3 AutoDiscovery Target Command Execution
2020-02-19 Clément Billac, bcoles <bcoles@gmail.com>, Erik WynterMETASPLOITRuby
EyesOfNetwork 5.3 Remote Code Execution
2020-02-08 Clement BillacPACKETSTORM
EyesOfNetwork 5.3 Remote Code Execution Exploit
2020-02-07 Clement BillacZDT
EyesOfNetwork 5.3 - Remote Code Execution
2020-02-07 Clément BillacEXPLOITPACK
EyesOfNetwork 5.3 - Remote Code Execution
2020-02-07 Clément BillacEXPLOITDB