Vulnerabilities

CVE-2021-28419

March 23, 2021

The “order_col” parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.

Summary:

The “order_col” parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.

Reference Links(if available):

https://github.com/seopanel/Seo-Panel/issues/209

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)

Tags: CVE, CVE-2021-28419, exploit, MISC, vulnerability

CVE-2021-28419

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

CISA: CISA Releases Eight Industrial Control Systems Advisories

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

CISA: CISA Releases Eight Industrial Control Systems Advisories

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts