322 matches found
CVE-2020-35930
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI...
Cross site scripting
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI...
CVE-2020-35930
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI...
CVE-2020-35930
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI...
CVE-2020-35930
Seo Panel 4.8.0 is affected by a stored XSS vulnerability that an authenticated user can trigger through the url parameter in the seo/seopanel/websites.php URI. The issue arises in the handling of the url parameter and is documented across multiple sources, including PT-2020-17561 which confirms ...
CVE-2020-35930: Improper Neutralization of Input During Web Page Generation
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI...
PT-2020-17561 · Seo Panel · Seo Panel
Name of the Vulnerable Software and Affected Versions: Seo Panel version 4.8.0 Description: The issue allows stored XSS by an authenticated user via the url parameter, as demonstrated by the "/seo/seopanel/websites.php" URI. Recommendations: For Seo Panel version 4.8.0, consider restricting acces...
SEO Panel 跨站脚本漏洞
SEO Panel is a free, open source SEO optimization software. A stored cross-site scripting vulnerability exists in Seo Panel 4.8.0. An attacker can exploit this vulnerability via the seo/seopanel/websites.php URI to conduct cross-site scripting attacks...
SEO Panel 4.6.0 Remote Code Execution
Exploit Title: SEO Panel 4.6.0 - Remote Code Execution Google Dork: N/A Date: 2020-10-03 Exploit Author: Kiko Andreu kikoas1995 & Daniel Monzón stark0de Vendor Homepage: https://seopanel.org/ Software Link: https://www.seopanel.org/spdownload/4.6.0 Version: 4.6.0 Tested on: Kali Linux x64 5.4.0 C...
CVE-2018-14384
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting XSS vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter...
Cross site scripting
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting XSS vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter...
CVE-2018-14384
CVE-2018-14384 affects the Website Manager module of SEO Panel ≤3.13.0, with a stored XSS vulnerability exploitable by remote authenticated attackers via the websites.php name parameter. The issue allows injection of arbitrary script/HTML and is documented with CVSS v2 base score 3.5 (LOW) and CV...
CVE-2018-14384
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting XSS vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter...
CVE-2018-14384: Improper Neutralization of Input During Web Page Generation
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting XSS vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter...
PT-2020-8533
Name of the Vulnerable Software and Affected Versions: SEO Panel versions 3.13.0 and earlier Description: The Website Manager module is affected by a stored Cross-Site Scripting XSS issue, allowing remote authenticated attackers to inject arbitrary web script or HTML via the name parameter in the...
Seo Panel Newsletter 1.2.0 Cross Site Scripting
Exploit Title: Seo Panel Plugin Newsletter 1.2.0 - 'plugins/newsletter/unsubscribemaillist.php email' Cross-site Scripting Google Dork: N/A Date: 15 April 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: http://sp.seopanel.in/...
CVE-2017-10838
Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10839
SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...