Seo Panel@4.10.0 Security Vulnerabilities and Issues — Seo Panel@4.10.0 CVE List

Lucene search

SeopanelSeo Panel4.10.0

4 matches found

CVE•added 2024/01/30 7:15 a.m.•32 views

CVE-2024-22643

A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets.

6.5CVSS6.6AI score0.00119EPSS

CVE•added 2024/01/30 7:15 a.m.•31 views

CVE-2024-22648

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment.

5.3CVSS5.2AI score0.00136EPSS

CVE•added 2024/01/30 7:15 a.m.•28 views

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.

5.3CVSS5.3AI score0.00267EPSS

CVE•added 2024/01/30 7:15 a.m.•25 views

CVE-2024-22647

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames.

5.3CVSS5.1AI score0.00168EPSS