nuclei-templates/http/cves/2020/CVE-2020-8654.yaml

59 lines
2.2 KiB
YAML

id: CVE-2020-8654
info:
name: EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution
author: praetorian-thendrickson
severity: high
description: EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655, CVE-2020-8656, CVE-2020-8657, and CVE-2020-9465.
impact: |
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary SQL queries or remote code on the affected system.
remediation: |
Upgrade to a patched version of EyesOfNetwork or apply the necessary security patches to mitigate the vulnerabilities.
reference:
- https://github.com/h4knet/eonrce
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb
- https://github.com/EyesOfNetworkCommunity/eonweb/issues/50
- https://nvd.nist.gov/vuln/detail/CVE-2020-8654
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss-score: 8.8
cve-id: CVE-2020-8654
cwe-id: CWE-78
epss-score: 0.04987
epss-percentile: 0.9205
cpe: cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: eyesofnetwork
product: eyesofnetwork
tags: cisa,eyesofnetwork,rce,authenticated,msf,cve,cve2020
http:
- method: GET
path:
- "{{BaseURL}}/css/eonweb.css"
matchers-condition: and
matchers:
- type: dsl
dsl:
- compare_versions(version, '< 5.4', '>= 5.1')
- type: word
part: body
words:
- "EyesOfNetwork"
- type: status
status:
- 200
extractors:
- type: regex
name: version
group: 1
regex:
- "# VERSION : ([0-9.]+)"
internal: true
part: body
# digest: 4a0a0047304502204d19aedf3babd8cf7aa3f157ff64bfa2de3c9253e12f1a2a329bcf1dc62f7cac022100b38977e7ebec3fdc25c54e419c57d076edcf6c224d64586a279ab8b12c3d7ed9:922c64590222798bb761d5b6d8e72950