CVE-2017-15880

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php (for insert_group and update_group).

• CWE-89

• https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php%20SQLiExploit, Third Party Advisory
• https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php-update_group-SQL%20injection%20vulnerabilityExploit, Third Party Advisory
• https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php%20SQLiExploit, Third Party Advisory
• https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php-update_group-SQL%20injection%20vulnerabilityExploit, Third Party Advisory

Published

Oct 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15874archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 ha…5
• CVE-2017-15875SQL injection vulnerability in Password Recovery in GPWeb 8.…
• CVE-2017-15876Unrestricted File Upload vulnerability in GPWeb 8.4.61 allow…
• CVE-2017-15877Insecure Permissions vulnerability in db.php file in GPWeb 8…
• CVE-2017-15878A cross-site scripting (XSS) vulnerability exists in fields/…
• CVE-2017-15879CSV Injection (aka Excel Macro Injection or Formula Injectio…
• CVE-2017-15881Cross-Site Scripting vulnerability in KeystoneJS before 4.0.…4.8
• CVE-2017-15882The London Trust Media Private Internet Access (PIA) applica…
• CVE-2017-15883Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x …
• CVE-2017-15884In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmwar…
• CVE-2017-15885Reflected XSS in the web administration portal on the Axis 2…
• CVE-2017-15886Server-side request forgery (SSRF) vulnerability in Link Pre…