Skip to content
OpenAdvisories
Unscored CVE-2022-38357 EUVD-2022-40946GHSA-w9xf-vff6-27gq

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the ur…

Published Aug 15, 2022 · Updated Aug 3, 2024 · Assigned by tenable

Description

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php.

Affected products

VendorProductAffectedFixed
— Eyes of Network Web 5.3 —

References