322 matches found
PT-2024-19520 · Seo Panel · Seo Panel
Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: A user enumeration issue was found, occurring during user authentication. This issue allows an attacker to determine if a username is valid or not through differences in error messages, enabling a...
CVE-2024-22643
A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...
CVE-2024-22643: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...
CVE-2024-22648: Server-Side Request Forgery (SSRF)
A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...
CVE-2024-22646: Generation of Error Message Containing Sensitive Information
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...
CVE-2024-22647: Observable Discrepancy
An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
SEO Panel Cross-Site Request Forgery Vulnerability
SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A cross-site request forgery vulnerability exists in SEO Panel version 4.10.0, which originates from a vulnerability that allows a remote attacker to perform an unauthorized user password reset...
PT-2024-19519 · Seo Panel · Seo Panel
Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: An email address enumeration issue exists in the password reset function. This allows an attacker to guess which emails exist on the system. Recommendations: For SEO Panel version 4.10.0, consider disabli...
CVE-2024-22643
A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...
SEO Panel Security Breach
SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A security vulnerability exists in SEO Panel version 4.10.0, which stems from a stored server segment request forgery vulnerability in the Crawl Meta Data feature that allows remote attackers to scan ports in t...
CVE-2024-22647
CVE-2024-22647 : SEO Panel 4.10.0 is vulnerable to user enumeration during authentication. The issue arises from differences in error messages that reveal whether a username exists, enabling brute-force attempts with valid usernames. Affected product: SEO Panel (version 4.10.0). Root cause: authe...
CVE-2024-22648
A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...
CVE-2024-22646
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...
CVE-2024-22648
A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...
CVE-2024-22648
The CVE-2024-22648 entry concerns SEO Panel version 4.10.0 and identifies a Blind SSRF vulnerability in the Crawl Meta Data feature. The root cause is that the Crawl Meta Data function allows remote attackers to trigger requests from the vulnerable server to internal ports, enabling potential loc...
CVE-2024-22647
An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
CVE-2024-22643
A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...
CVE-2021-34117
SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...
