high7.2Public exploit code
CVE-2021-28419
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databas…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2)2021-04-26 · webapps · php
Impact
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seopanel | Seo Panel | Version 4.8.0 |