CVE-2021-28419

Опубликовано: 18 мар. 2021

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.

Ссылки

http://packetstormsecurity.com/files/162322/SEO-Panel-4.8.0-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/seopanel/Seo-Panel/issues/209
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/162322/SEO-Panel-4.8.0-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/seopanel/Seo-Panel/issues/209
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.0923

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-4mhj-4jj5-gpmh

github

больше 3 лет назад