CVE-2025-29452
- EPSS 0.69%
- Veröffentlicht 17.04.2025 21:15:50
- Zuletzt bearbeitet 23.04.2025 18:08:53
An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component.
CVE-2025-29451
- EPSS 0.69%
- Veröffentlicht 17.04.2025 00:00:00
- Zuletzt bearbeitet 23.04.2025 18:09:14
An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component.
CVE-2024-22648
- EPSS 0.14%
- Veröffentlicht 30.01.2024 07:15:08
- Zuletzt bearbeitet 21.11.2024 08:56:32
A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment.
CVE-2024-22647
- EPSS 0.17%
- Veröffentlicht 30.01.2024 07:15:08
- Zuletzt bearbeitet 29.05.2025 15:15:29
An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with...
CVE-2024-22646
- EPSS 0.35%
- Veröffentlicht 30.01.2024 07:15:08
- Zuletzt bearbeitet 04.06.2025 21:15:37
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.
CVE-2024-22643
- EPSS 0.12%
- Veröffentlicht 30.01.2024 07:15:07
- Zuletzt bearbeitet 30.05.2025 20:15:31
A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets.
CVE-2021-34117
- EPSS 2.31%
- Veröffentlicht 15.02.2023 22:15:11
- Zuletzt bearbeitet 20.03.2025 14:15:14
SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information.
CVE-2021-39413
- EPSS 0.23%
- Veröffentlicht 05.11.2021 16:15:07
- Zuletzt bearbeitet 21.11.2024 06:19:29
Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker...
CVE-2021-29008
- EPSS 0.18%
- Veröffentlicht 25.03.2021 20:15:13
- Zuletzt bearbeitet 21.11.2024 06:00:30
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter.
CVE-2021-29010
- EPSS 0.18%
- Veröffentlicht 25.03.2021 20:15:13
- Zuletzt bearbeitet 21.11.2024 06:00:31
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter.