322 matches found
Sql injection
SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10838: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10839: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2017-10839
SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2017-10838
Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10839
SEO Panel contains a SQL injection vulnerability (CVE-2017-10839) in versions prior to 3.11.0. An authenticated attacker can execute arbitrary SQL commands via unspecified vectors, risking data exposure/alteration. Affected software is SEO Panel; remediation is to update to the latest version (3....
CVE-2017-10838
The CVE-2017-10838 entry concerns SEO Panel prior to version 3.11.0, with a Cross-site scripting (CWE-79) vulnerability that allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Affected software is SEO Panel; the underlying exposure is in the web interface, leading ...
PT-2017-11547
Name of the Vulnerable Software and Affected Versions SEO Panel versions prior to 3.11.0 Description The issue allows authenticated attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.11.0, update to version 3.11.0 or later to resolve the issue...
PT-2017-11546
Name of the Vulnerable Software and Affected Versions SEO Panel versions prior to 3.11.0 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML. Recommendations For versions prior to 3.11.0, update to version 3.11.0 or later to resolve the issue...
SEO Panel Cross-Site Scripting Vulnerability (CNVD-2017-25508)
Seo Panel is a set of control panels for managing your website's search engine optimization, which provides features such as website rankings, Google, Baidu and other search engine indexing, Sitemaps auto-generator and keyword positioning check. A cross-site scripting vulnerability exists in...
Multiple vulnerabilities in SEO Panel
Overview SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 SQL injection CWE-89 - CVE-2017-10839 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...
JVN#39628662: Multiple vulnerabilities in SEO Panel
SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N| Base Score: 2.6 SQL injection...
CVE-2014-100024
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-100024
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-100024
SEO Panel is affected by a Cross-site Scripting (XSS) vulnerability prior to version 3.4.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Remediation: upgrade to at least 3.4.0 or apply vendor-supplied fixes once available; details on vectors ar...
CVE-2014-100024: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2015-3631
Name of the Vulnerable Software and Affected Versions Seo Panel versions prior to 3.4.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue...
SEO Control Panel 3.6.0 SQL Injection Vulnerability
SEO Control Panel version 3.0 suffers from a remote authenticated SQL injection vulnerability. Exploit Title: Seo Control Panel 3.6.0 Authenticated Sql Injection Date: 10/10/2014 Exploit Author: Tiago Carvalho email protected or email protected Vendor Homepage: www.seopanel.in Software Link:...