CVE-2020-8656

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.

• CWE-89

• http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/EyesOfNetworkCommunity/eonapi/issues/16Third Party Advisory
• http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/EyesOfNetworkCommunity/eonapi/issues/16Third Party Advisory

Published

Feb 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8645An issue was discovered in Simplejobscript.com SJS through 1…9.8
• CVE-2020-8647There is a use-after-free vulnerability in the Linux kernel …6.1
• CVE-2020-8648There is a use-after-free vulnerability in the Linux kernel …7.1
• CVE-2020-8649There is a use-after-free vulnerability in the Linux kernel …5.9
• CVE-2020-8654An issue was discovered in EyesOfNetwork 5.3. An authenticat…8.8
• CVE-2020-8655An issue was discovered in EyesOfNetwork 5.3. The sudoers co…7.8
• CVE-2020-8657An issue was discovered in EyesOfNetwork 5.3. The installati…9.8
• CVE-2020-8658The BestWebSoft Htaccess plugin through 1.8.1 for WordPress …8.8
• CVE-2020-8659CNCF Envoy through 1.13.0 may consume excessive amounts of m…7.5
• CVE-2020-8660CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspecto…5.3
• CVE-2020-8661CNCF Envoy through 1.13.0 may consume excessive amounts of m…7.5
• CVE-2020-8663Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust …7.5