CVE-2021-47872

Published
View on NVD ↗
CVSS v3
7.1
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.

World's first seo control panel for multiple websites
GitHubGitHub
147