CVE-2021-28420

CVE-2021-28420 is a cross-site scripting (XSS) vulnerability affecting Seo Panel 4.8.0. The issue allows remote attackers to inject JavaScript through alerts.php via the from_time parameter. Several connected sources (Red Hat CVE entry, OSV, CNVD, CVE lists, Exploit-DB) confirm the same flaw and ...

CVE-2021-28420

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...

CVE-2021-28420

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...

CVE-2021-28419

SEO Panel 4.8.0 is affected by CVE-2021-28419 due to a time-based blind SQL injection in the order_col parameter of archive.php. The vulnerability can allow an attacker to retrieve all databases and potentially expose sensitive data. Public evidence includes PoC/exploit activity and references (e...

CVE-2021-28419

The "ordercol" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases...

CVE-2021-28419

The "ordercol" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases...

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

CVE-2021-28418

CVE-2021-28418 describes a cross-site scripting (XSS) vulnerability in Seo Panel 4.8.0 that allows a remote attacker to inject JavaScript via the settings.php and the category parameter. Multiple connected sources corroborate the issue (NVD/OSV/CNVD/CVELIST, Exploit-DB). Exploit-DB references a r...

CVE-2021-28417

CVE-2021-28417 describes a cross-site scripting (XSS) vulnerability in Seo Panel 4.8.0 . The issue allows remote attackers to inject JavaScript through the archive.php page via the search_name parameter (and related descriptions reference a reflected XSS in the SEO admin flow). The affected compo...

CVE-2021-28417

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

CVE-2021-28417

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

SEO Panel 4.8.0 - (order_col) Blind SQL Injection Vulnerability

Exploit Title: SEO Panel 4.8.0 - 'ordercol' Blind SQL Injection Exploit Author: Piyush Patil Vendor Homepage: https://www.seopanel.org/ Software Link: https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0 Version: 4.8.0 Reference - https://github.com/seopanel/Seo-Panel/issues/209 Step 1 - Logi...

SEO Panel 4.8.0 SQL Injection

Exploit Title: SEO Panel 4.8.0 - 'ordercol' Blind SQL Injection Date: 17/02/2021 Exploit Author: Piyush Patil Vendor Homepage: https://www.seopanel.org/ Software Link: https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0 Version: 4.8.0 Reference -...

SEO Panel 跨站脚本漏洞

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the alerts.php fromtime parameter...

CVE-2021-28418: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

CVE-2021-28419: Improper Neutralization of Special Elements used in an SQL Command

The "ordercol" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases...

SEO Panel SQL注入漏洞

SEO Panel is a free, open source SEO optimization software. A temporal SQL blind injection vulnerability exists in the ordercol parameter in archive.php in Seo Panel version 4.8.0. An attacker can exploit this vulnerability to retrieve all databases...

CVE-2021-28417: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

CVE-2021-28420: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...