ID:5778 - Exploit for OS Command Injection in EyesOfNetwork - CVE-2020-8654

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation. A remote authenticated attacker can buse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index.php autodiscovery.php target field.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation