CVE-2014-1855

MEDIUM · 4.3 CVSS Gepubliceerd: 20-05-2014 CWE-79

Beschrijving NL

Meerdere cross-site scripting (XSS) kwetsbaarheden in Seo Panel vóór 3.5.0 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) capcheck-parameter naar directories.php of (2) zoekwoordparameter naar proxy.php.

Origineel (Engels) tonen

Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php.

Vendors

Seopanel

Affected products

Seo Panel

References

forum.seopanel.in
packetstormsecurity.com
secunia.com
www.securityfocus.com
www.htbridge.com