Lucene search
+L

322 matches found

Cvelist
Cvelist
•added 2024/01/30 12:00 a.m.•56 views

CVE-2024-22648

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...

5.5AI score0.00609EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/30 12:00 a.m.•36 views

PT-2024-19521 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality. This makes it possible for remote attackers to scan ports in the local environment. Recommendations: For SEO Panel version 4.10.0,...

5.3CVSS7.2AI score0.00609EPSS
SaveExploits1References7
CVE
CVE
•added 2024/01/30 12:00 a.m.•64 views

CVE-2024-22647

CVE-2024-22647 : SEO Panel 4.10.0 is vulnerable to user enumeration during authentication. The issue arises from differences in error messages that reveal whether a username exists, enabling brute-force attempts with valid usernames. Affected product: SEO Panel (version 4.10.0). Root cause: authe...

5.3CVSS5.1AI score0.00557EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/30 12:00 a.m.•7 views

CVE-2024-22646: Generation of Error Message Containing Sensitive Information

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

5.3CVSS5.9AI score0.00584EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/30 12:00 a.m.•22 views

SEO Panel Security Breach

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A security vulnerability exists in SEO Panel version 4.10.0, which stems from a stored server segment request forgery vulnerability in the Crawl Meta Data feature that allows remote attackers to scan ports in t...

5.3CVSS6.5AI score0.00609EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/01/30 12:00 a.m.•14 views

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

6.9AI score0.00584EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/30 12:00 a.m.•20 views

PT-2024-19519 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: An email address enumeration issue exists in the password reset function. This allows an attacker to guess which emails exist on the system. Recommendations: For SEO Panel version 4.10.0, consider disabli...

5.3CVSS5.3AI score0.00584EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/30 12:00 a.m.•10 views

CVE-2024-22648: Server-Side Request Forgery (SSRF)

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...

5.3CVSS5.9AI score0.00609EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/30 12:00 a.m.•48 views

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

5.6AI score0.00584EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/30 12:00 a.m.•17 views

SEO Panel Cross-Site Request Forgery Vulnerability

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A cross-site request forgery vulnerability exists in SEO Panel version 4.10.0, which originates from a vulnerability that allows a remote attacker to perform an unauthorized user password reset...

6.5CVSS6.9AI score0.00326EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/30 12:00 a.m.•3 views

CVE-2024-22643: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

6.5CVSS5.8AI score0.00326EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/01/30 12:00 a.m.•21 views

CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

6.5CVSS7.3AI score0.00326EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/30 12:00 a.m.•11 views

CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

6.9AI score0.00326EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/30 12:00 a.m.•35 views

CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

6.9AI score0.00326EPSS
SaveExploits1References1
CVE
CVE
•added 2024/01/30 12:00 a.m.•78 views

CVE-2024-22643

A CSRF vulnerability (CVE-2024-22643) affects SEO Panel v4.10.0, enabling remote attackers to perform unauthorized user password resets. Root cause: CSRF allowing state-changing password-reset actions. Documented by Red Hat, OSV, and PT-Security entries; exploitation details are not provided in t...

6.5CVSS6.6AI score0.00326EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2024/01/30 12:00 a.m.•37 views

CVE-2024-22647

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...

5.3CVSS6.7AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/30 12:00 a.m.•22 views

SEO Panel Security Breach

SEO Panel is an open source panel for managing SEO Search Engine Optimization on websites. A security vulnerability exists in SEO Panel version 4.10.0 that stems from a discrepancy in error messages during user authentication that could allow an attacker to determine if a username is valid, leadi...

5.3CVSS6.8AI score0.00557EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/02/15 10:15 p.m.•19 views

CVE-2021-34117

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

7.5CVSS8AI score
SaveExploits0References3
NVD
NVD
•added 2023/02/15 10:15 p.m.•32 views

CVE-2021-34117

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

7.5CVSS8AI score0.00941EPSS
SaveExploits1References3
Prion
Prion
•added 2023/02/15 10:15 p.m.•39 views

Sql injection

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

5CVSS8AI score0.00941EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder