Skip to content

Instantly share code, notes, and snippets.

@delyura

delyura/gist:bda0b16cf99cb14bb767db84e5110419 Secret

Created September 21, 2022 11:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save delyura/bda0b16cf99cb14bb767db84e5110419 to your computer and use it in GitHub Desktop.
Save delyura/bda0b16cf99cb14bb767db84e5110419 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
CVE-2022-XXXXX
------------------------------------------
[Suggested description]
EyesOfNetwork web interface 5.3 allows admins to conduct reflected XSS attacks.
------------------------------------------
[Vulnerability Type]
Cross Site Scripting (XSS)
------------------------------------------
[Vendor of Product]
EyesOfNetwork
------------------------------------------
[Affected Product Code Base]
EyesOfNetwork web interface 5.3
------------------------------------------
[Affected Component]
We found reflected xss at /module/report_event/index.php
------------------------------------------
[Attack Type]
Remote
------------------------------------------
[Attack Vectors]
https://github.com/EyesOfNetworkCommunity/eonweb/issues/119
The vulnerable parameter is GET-parameter type.
------------------------------------------
[Reference]
EyesOfNetwork web interface 5.3 (https://github.com/EyesOfNetworkCommunity/eonweb)
------------------------------------------
[Discoverer]
Yuriy Bairov, Dmitriy Tatarov
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment