published February 28, 2020
NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.
⚠️ An unauthenticated SQL injection is lurking in the EyesOfNetwork eonweb interface! It allows attackers to sneak in and bypass authentication simply by tweaking a cookie. 🔥 Think of it like a restaurant that serves meals without checking reservations. An unverified diner could walk in and order anything from the menu, completely bypassing the usual checks! An attacker could leverage this SQL injection to gain unauthorized access to sensitive areas of the system and perform actions as any user, potentially leading to data breaches or unauthorized changes. This could be devastating for organizations relying on this tool!
Think of it like a restaurant that serves meals without checking reservations. An unverified diner could walk in and order anything from the menu, completely bypassing the usual checks! This vulnerability in EyesOfNetwork eonweb versions 5.1 through 5.3 before 5.3-3 allows attackers to manipulate the user_id field in cookies, enabling them to bypass authentication and execute unauthorized SQL commands.
An attacker could leverage this SQL injection to gain unauthorized access to sensitive areas of the system and perform actions as any user, potentially leading to data breaches or unauthorized changes. This could be devastating for organizations relying on this tool! To protect against this vulnerability, update EyesOfNetwork eonweb to version 5.3-3 or later immediately. Additionally, ensure your web applications validate and sanitize all user inputs before processing. Regular security audits can help catch similar issues! You've got this! With these steps, you can secure your eonweb installation and keep your data safe. 🛡️