Description
An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmap_binary parameter to lilac/autodiscovery.php.
Unscored
CVE-2020-27887
EUVD-2020-20380GHSA-w57r-m94c-hxh3
An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscov…
Published Oct 29, 2020 · Updated Aug 4, 2024 · Assigned by mitre