SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information.
References
| Link | Resource |
|---|---|
| https://gist.github.com/victomteng1997/a0d47d6982a7b382f632ec7e8c3307f1 | Exploit Third Party Advisory |
| https://github.com/seopanel/Seo-Panel/issues/219 | Exploit Vendor Advisory |
| https://www.seopanel.org/ | Vendor Advisory |
| https://gist.github.com/victomteng1997/a0d47d6982a7b382f632ec7e8c3307f1 | Exploit Third Party Advisory |
| https://github.com/seopanel/Seo-Panel/issues/219 | Exploit Vendor Advisory |
| https://www.seopanel.org/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 06:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/victomteng1997/a0d47d6982a7b382f632ec7e8c3307f1 - Exploit, Third Party Advisory | |
| References | () https://github.com/seopanel/Seo-Panel/issues/219 - Exploit, Vendor Advisory | |
| References | () https://www.seopanel.org/ - Vendor Advisory |
Information
Published : 2023-02-15 22:15
Updated : 2024-11-21 06:09
NVD link : CVE-2021-34117
Mitre link : CVE-2021-34117
CVE.ORG link : CVE-2021-34117
JSON object : View
Products Affected
seopanel
- seo_panel
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')