CVE-2020-8656
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 85%
from disclosure to weapon1 days
Published on NVDFeb 6
1st PoC+1d
metasploitFeb 6
VulnCheck+2087d
exploitation probability
85%top 1% of all CVEs
observed exploitation
yesVulnCheck
5 public exploit(s)
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.
Affected products
n/a · n/apublic PoCs found — 5✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/48169exploitdbwww.exploit-db.com/exploits/48025unverifiedcve_referencepacketstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/b206a059b299unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.