exploitDog

CVE-2020-27461

Опубликовано: 20 авг. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution through an authenticated file upload via the Settings Panel>Import website function.

Ссылки

https://sourceforge.net/projects/seopanel/files/seopanel.v.4.6.0.zip/download
Patch
Third Party Advisory
https://www.exploit-db.com/exploits/48862
Exploit
Third Party Advisory
VDB Entry
https://www.seopanel.org/
Product
https://sourceforge.net/projects/seopanel/files/seopanel.v.4.6.0.zip/download
Patch
Third Party Advisory
https://www.exploit-db.com/exploits/48862
Exploit
Third Party Advisory
VDB Entry
https://www.seopanel.org/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:seopanel:seopanel:4.6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05674

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-rv3m-9rv8-5g3p

github

больше 3 лет назад

A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution through an authenticated file upload via the Settings Panel>Import website function.

EPSS

Процентиль: 90%

0.05674

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434