PT-2026-3824 · Seo Panel · Seo Panel

Piyush Patil · Publicado 2026-01-21 · Atualizado 2026-01-21 · CVE-2021-47872

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions SEO Panel versions prior to 4.9.0

Description SEO Panel versions prior to 4.9.0 contain a blind SQL injection in the archive.php page. Authenticated attackers can manipulate database queries through the order col parameter. Attackers can extract database information by injecting malicious SQL code into the order col parameter. The order col parameter is vulnerable to SQL injection attacks.

Recommendations Update SEO Panel to version 4.9.0 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2021-47872

Produtos afetados

Seo Panel

Referências · 8

• 🔥 https://exploit-db.com/exploits/49666 · Exploit
• https://github.com/seopanel/Seo-Panel/issues/209 · Nota
• https://github.com/seopanel/Seo-Panel/releases/tag/4.9.0 · Correção
• https://vulncheck.com/advisories/seo-panel-ordercol-blind-sql-injection · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47872 · Nota de Segurança
• https://t.me/CVEtracker/42663 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-47872 · Aviso do Fabricante
• https://seopanel.org · Nota