CVE-2017-16842

Cross-site scripting XSS vulnerability in admin/googlesearchconsole/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML...

Yoast SEO <= 5.7.1 - Authenticated Cross-Site Scripting (XSS)

Cross-site scripting XSS vulnerability in admin/googlesearchconsole/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script or HTML...

searchenginegenie.com XSS vulnerability

Open Bug Bounty ID: OBB-410830 Description| Value ---|--- Affected Website:| searchenginegenie.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Poisoning the Well: Banking Trojan Targets Google Search Results

This blog post was authored by Edmund Brumaghin, Earl Carter and Emmanuel Tacheau.SummaryIt has become common for users to use Google to find information that they do not know. In a quick Google search you can find practically anything you need to know. Links returned by a Google search, however,...

seo-progon.info XSS vulnerability

Open Bug Bounty ID: OBB-322798 Description| Value ---|--- Affected Website:| seo-progon.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

seo-webmaster-tools.cz Open Redirect vulnerability

Vulnerable URL: http://www.seo-webmaster-tools.cz/redirect.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 5495211 VIP website status:| N...

seo-check.to.web.tr Open Redirect vulnerability

Vulnerable URL: http://seo-check.to.web.tr/redirect.php?url=https%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

vBulletin VBSEO 'visitormessage.php' Remote Code Injection Vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program. vBulletin VBSEO module is one of the SEO management module . A security vulnerability exists in the functionsvbseohook.php file in the vBulletin VBSEO module...

CVE-2017-10838

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10839

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10838

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10839

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10839

SEO Panel contains a SQL injection vulnerability (CVE-2017-10839) in versions prior to 3.11.0. An authenticated attacker can execute arbitrary SQL commands via unspecified vectors, risking data exposure/alteration. Affected software is SEO Panel; remediation is to update to the latest version (3....

CVE-2017-10839

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10838

The CVE-2017-10838 entry concerns SEO Panel prior to version 3.11.0, with a Cross-site scripting (CWE-79) vulnerability that allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Affected software is SEO Panel; the underlying exposure is in the web interface, leading ...

CVE-2017-10838

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

SEO Panel Cross-Site Scripting Vulnerability (CNVD-2017-25508)

Seo Panel is a set of control panels for managing your website's search engine optimization, which provides features such as website rankings, Google, Baidu and other search engine indexing, Sitemaps auto-generator and keyword positioning check. A cross-site scripting vulnerability exists in...

Multiple vulnerabilities in SEO Panel

Overview SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 SQL injection CWE-89 - CVE-2017-10839 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...