Security Advisory
CVE-2021-47872
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the order_col parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.