CVE-2017-10839: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10838: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10838

The CVE-2017-10838 entry concerns SEO Panel prior to version 3.11.0, with a Cross-site scripting (CWE-79) vulnerability that allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Affected software is SEO Panel; the underlying exposure is in the web interface, leading ...

CVE-2017-10839

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10839

SEO Panel contains a SQL injection vulnerability (CVE-2017-10839) in versions prior to 3.11.0. An authenticated attacker can execute arbitrary SQL commands via unspecified vectors, risking data exposure/alteration. Affected software is SEO Panel; remediation is to update to the latest version (3....

CVE-2017-10838

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

SEO Panel Cross-Site Scripting Vulnerability (CNVD-2017-25508)

Seo Panel is a set of control panels for managing your website's search engine optimization, which provides features such as website rankings, Google, Baidu and other search engine indexing, Sitemaps auto-generator and keyword positioning check. A cross-site scripting vulnerability exists in...

Multiple vulnerabilities in SEO Panel

Overview SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 SQL injection CWE-89 - CVE-2017-10839 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

JVN#39628662: Multiple vulnerabilities in SEO Panel

SEO Panel provided by SEO Panel contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-10838 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:H/Au:N/C:N/I:P/A:N| Base Score: 2.6 SQL injection...

seo.khabarsaz.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-280629 Description| Value ---|--- Affected Website:| seo.khabarsaz.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

seo.16o2.com Open Redirect vulnerability

Vulnerable URL: http://seo.16o2.com/redirect.php?url=http%3A%2F%2Fopenbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

seo-akademie.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-280574 Description| Value ---|--- Affected Website:| seo-akademie.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

seo-noob.ru Open Redirect vulnerability

Vulnerable URL: http://seo-noob.ru/links/go.php?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Cross-site Scripting (XSS)

Concrete5 is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script because the library does not sanitize it's parameters before rendering them for display. The following fields are affected: bannedword in...

seo.navilog.fr Open Redirect vulnerability

Open Bug Bounty ID: OBB-255023 Description| Value ---|--- Affected Website:| seo.navilog.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Concrete CMS: Stored XSS in Pages SEO dialog Name field (concrete5 8.1.0)

Intro First things first, so... Crayons, crayons everywhere : Type of issue: Core CMS issue Level of severity: Internal Attack Vector Concrete5 version: 8.1.0 Summary There is Stored XSS vulnerability in Name field SEO dialog for pages. Malicious user is able to prepare payload which is then...

WordPress Yoast SEO plugin <= 3.3.1 - Cross-site Request Forgery (CSRF) Vulnerability

WordPress Yoast SEO plugin Cross-site Request Forgery CSRF exists on /wp-admin/admin.php?page=wpseotools&tool=import-export page. Solution Update the plugin...

Fake SEO Plugin Used In WordPress Malware Attacks

Malware masquerading itself as an SEO plugin called WP-Base-SEO has infected close to 4,000 WordPress sites in the past two weeks, according to security experts. The intent of the hackers behind the malware is to hide in plain sight, appearing as legitimate SEO plugin, at the same time creating a...

SANADATA SanaCMS Cross-Site Scripting Vulnerability

SANADATA SanaCMS is a content management system CMS of SANADATA Company in Iran. A cross-site scripting vulnerability exists in the /sanadata/seo/index.asp file in SANADATA SanaCMS version 7.3. The vulnerability can be exploited to inject arbitrary web script or HTML with the 'txtFrom' parameter...

[SECURITY] Fedora 24 Update: drupal7-metatag-1.21-1.fc24

The Metatag module allows you to automatically provide structured metadata, aka "meta tags", about your website. In the context of search engine optimization, when people refer to meta tags they are usually referring to the meta description tag and the meta keywords tag that may help improve the...