high7.1
CVE-2021-47872
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate databas…
Impact
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| SEO Panel | SEO Panel | before 4.9.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.