CVE-2017-15880: EyesOfNetwork

High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days.

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php (for insert_group and update_group).

Affected products

• EyesOfNetwork EyesOfNetwork: version 5.1-0 only

Published 2017-10-24. Last modified 2026-06-17.