CVEvulnerability
CVE-2014-1855
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php.
Affected configurations
• seopanel seo panel (<= 3.4.0)
• seopanel seo panel 3.3.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://forum.seopanel.in/viewtopic.php?f=7&t=10978 Vendor Advisory
- http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html Exploit
- http://secunia.com/advisories/58706 Vendor Advisory
- http://www.securityfocus.com/archive/1/532119/100/0/threaded www.securityfocus.com
- https://www.htbridge.com/advisory/HTB23200 Exploit
- http://forum.seopanel.in/viewtopic.php?f=7&t=10978 Vendor Advisory
- http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html Exploit
- http://secunia.com/advisories/58706 Vendor Advisory
- http://www.securityfocus.com/archive/1/532119/100/0/threaded www.securityfocus.com
- https://www.htbridge.com/advisory/HTB23200 Exploit