Description (CNA)
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SEO Panel / SEO Panel | affected 4.8.0 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/49666
- https://www.seopanel.org/
- https://github.com/seopanel/Seo-Panel/releases/tag/4.9.0
- https://github.com/seopanel/Seo-Panel/issues/209
- https://www.vulncheck.com/advisories/seo-panel-ordercol-blind-sql-injection
ADP enrichment
No English description supplied.
No references supplied.