Seopanel
Seopanel SEO Panel: vulnerabilidades y CVE
Seopanel SEO Panel tiene 23 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-47872 | Alta (7) | 0.26% | — | 21 ene 2026 | SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can… |
| CVE-2025-29452 | Alta (7.6) | 0.42% | — | 17 abr 2025 | An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component. |
| CVE-2025-29451 | Alta (7.6) | 0.42% | — | 17 abr 2025 | An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component. |
| CVE-2024-22648 | Media (5.3) | 0.61% | — | 30 ene 2024 | A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment. |
| CVE-2024-22647 | Media (5.3) | 0.56% | — | 30 ene 2024 | An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not,… |
| CVE-2024-22646 | Media (5.3) | 0.58% | — | 30 ene 2024 | An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system. |
| CVE-2024-22643 | Media (6.5) | 0.33% | — | 30 ene 2024 | A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets. |
| CVE-2021-34117 | Alta (7.5) | 0.94% | — | 15 feb 2023 | SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information. |
| CVE-2021-39413 | Media (6.1) | 0.84% | — | 5 nov 2021 | Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g)… |
| CVE-2021-29010 | Media (4.8) | 0.76% | — | 25 mar 2021 | A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter. |
| CVE-2021-29009 | Media (4.8) | 0.83% | — | 25 mar 2021 | A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter. |
| CVE-2021-29008 | Media (4.8) | 0.76% | — | 25 mar 2021 | A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter. |
| CVE-2021-28420 | Media (4.8) | 1.9% | — | 18 mar 2021 | A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter. |
| CVE-2021-28419 | Alta (7.2) | 11% | — | 18 mar 2021 | The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases. |
| CVE-2021-28418 | Media (4.8) | 1.9% | — | 18 mar 2021 | A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter. |
| CVE-2021-28417 | Media (4.8) | 1.9% | — | 18 mar 2021 | A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter. |
| CVE-2021-3002 | Media (6.1) | 4.3% | — | 1 ene 2021 | Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter. |
| CVE-2020-35930 | Media (5.4) | 0.52% | — | 31 dic 2020 | Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI. |
| CVE-2018-14384 | Media (4.8) | 0.79% | — | 2 mar 2020 | The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the… |
| CVE-2017-10839 | Alta (8.8) | 1.1% | — | 29 ago 2017 | SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors. |
| CVE-2017-10838 | Media (6.1) | 0.71% | — | 29 ago 2017 | Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2014-100024 | Media (4.3) | 1.2% | — | 13 ene 2015 | Cross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2014-1855 | Media (4.3) | 1.9% | — | 20 may 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.