Evil-DB LogoEvil-DB
← All CVEs

CVE-2021-28419

high · 7.2

The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.

7.2
CVSS
10.7%
EPSS (exploit prob.)
96th
EPSS percentile
2021-03-18
Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

VendorProductAffected versions
seopanelseo_panel4.8.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-28419