CVE-2017-6087

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

EyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the selected_events[] parameter in the (1) acknowledge, (2) delete, or (3) ownDisown function in module/monitoring_ged/ged_functions.php or the (4) module parameter to module/index.php.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2017/03/23/5Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/97109
https://github.com/EyesOfNetworkCommunity/eonweb/commit/196729cc045ef93ceeddd1de505a1de8f9cdf74dIssue Tracking, Patch, Third Party Advisory
https://sysdream.com/news/lab/2017-03-14-cve-2017-6087-eon-5-0-remote-code-execution/
https://www.exploit-db.com/exploits/41746/
http://www.openwall.com/lists/oss-security/2017/03/23/5Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/97109
https://github.com/EyesOfNetworkCommunity/eonweb/commit/196729cc045ef93ceeddd1de505a1de8f9cdf74dIssue Tracking, Patch, Third Party Advisory
https://sysdream.com/news/lab/2017-03-14-cve-2017-6087-eon-5-0-remote-code-execution/
https://www.exploit-db.com/exploits/41746/

Timeline

Published: Mar 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-60887.2Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL CVE-2017-60899.8SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or CVE-2017-60908.8Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute CVE-2017-60949.8CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifie CVE-2017-60959.8A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/csvexport.php (Una CVE-2017-60967.2A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lists/view-list.php (Req CVE-2017-60977.2A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign/count_of_send.p CVE-2017-60987.2A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/campaign_save.php (Requi CVE-2017-60996.1Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote at CVE-2017-61007.5tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.CVE-2017-61026.1Persistent XSS in wordpress plugin rockhoist-badges v1.2.2.CVE-2017-61036.1Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1.