Unrated
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulat...
CVE-2021-47872
First seen on SecPulse
Original description The description as published by the source.
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.
References
- advisory vulncheck.com
- report github.com
- web github.com
- web exploit-db.com
- web seopanel.org