PT-2026-3824 · Seo Panel · Seo Panel

Piyush Patil · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47872

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions SEO Panel versions prior to 4.9.0

Description SEO Panel versions prior to 4.9.0 contain a blind SQL injection in the archive.php page. Authenticated attackers can manipulate database queries through the order col parameter. Attackers can extract database information by injecting malicious SQL code into the order col parameter. The order col parameter is vulnerable to SQL injection attacks.

Recommendations Update SEO Panel to version 4.9.0 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-47872

Affected Products

Seo Panel

References · 8

• 🔥 https://exploit-db.com/exploits/49666 · Exploit
• https://github.com/seopanel/Seo-Panel/releases/tag/4.9.0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47872 · Security Note
• https://osv.dev/vulnerability/CVE-2021-47872 · Vendor Advisory
• https://github.com/seopanel/Seo-Panel/issues/209 · Note
• https://vulncheck.com/advisories/seo-panel-ordercol-blind-sql-injection · Note
• https://t.me/CVEtracker/42663 · Telegram Post
• https://seopanel.org · Note