BIT-seopanel-2021-28419

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/seopanel/BIT-seopanel-2021-28419.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-seopanel-2021-28419
Aliases
Published
2024-03-06T11:06:34Z
Modified
2024-03-06T11:25:28Z
Summary
[none]
Details

The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.

Database specific
{
    "cpes":  [
        "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*"
    ],
    "severity":  "High"
}
References

Affected packages

Bitnami / seopanel

Package

Name
seopanel
Purl
pkg:bitnami/seopanel

Severity

  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
4.8.0
Last Affected
4.8.0

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/seopanel/BIT-seopanel-2021-28419.json"