Non évaluée
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulat...
CVE-2021-47872
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.
Références
- advisory vulncheck.com
- report github.com
- web github.com
- web exploit-db.com
- web seopanel.org