CVE-2014-1855

Seo Panel 3.x is affected by two XSS vulnerabilities (CVE-2014-1855) in 3.4.0 and earlier. The issues arise from insufficient sanitisation of user-supplied data in the capcheck parameter (directories.php) and the keyword parameter (proxy.php), enabling remote code execution in the victim’s browse...

CVE-2014-1855

Multiple cross-site scripting XSS vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 capcheck parameter to directories.php or 2 keyword parameter to proxy.php...

PT-2014-4330

Name of the Vulnerable Software and Affected Versions Seo Panel versions prior to 3.5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the capcheck parameter to "directories.php" or the keyword parameter to "proxy.php". Recommendatio...

CVE-2014-1855: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 capcheck parameter to directories.php or 2 keyword parameter to proxy.php...