Vulnerability: Cross-site scripting Seo Panel

Posted: September 5, 2012 in Vulnerabilities
Tags: , , ,
0

Cross-site scriptingCross-site scripting Seo Panel

Affected Products: Seo Panel 3.x

Affected versions: Seo Panel 3.2.1, possibly earlier.

Description:

The vulnerability allows malicious people to conduct XSS attacks.

1. The vulnerability is caused due to insufficient input validation in the URL in the script support.php in includes / sp-common.php. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.

2. The vulnerability is caused due to insufficient input validation in the parameter “pageno” in script seo-plugins-manager.php (“sec” is “listinfo”, and “pid” is set). This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.

Manufacturer URL: http://www.seopanel.in/

Leave a Reply

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. ( Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out /  Change )

Cancel

Connecting to %s