CVE-2020-8654

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.

• CWE-78

• http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/EyesOfNetworkCommunity/eonweb/issues/50Exploit, Issue Tracking, Third Party Advisory
• http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/EyesOfNetworkCommunity/eonweb/issues/50Exploit, Issue Tracking, Third Party Advisory

Published

Feb 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8641Lotus Core CMS 1.0.1 allows authenticated Local File Inclusi…8.8
• CVE-2020-8644PlaySMS before 1.4.3 does not sanitize inputs from a malicio…9.8
• CVE-2020-8645An issue was discovered in Simplejobscript.com SJS through 1…9.8
• CVE-2020-8647There is a use-after-free vulnerability in the Linux kernel …6.1
• CVE-2020-8648There is a use-after-free vulnerability in the Linux kernel …7.1
• CVE-2020-8649There is a use-after-free vulnerability in the Linux kernel …5.9
• CVE-2020-8655An issue was discovered in EyesOfNetwork 5.3. The sudoers co…7.8
• CVE-2020-8656An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetw…9.8
• CVE-2020-8657An issue was discovered in EyesOfNetwork 5.3. The installati…9.8
• CVE-2020-8658The BestWebSoft Htaccess plugin through 1.8.1 for WordPress …8.8
• CVE-2020-8659CNCF Envoy through 1.13.0 may consume excessive amounts of m…7.5
• CVE-2020-8660CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspecto…5.3