{"action":"created","issue":{"url":"https://api.github.com/repos/sendtogeo/Seo-Panel/issues/4","labels_url":"https://api.github.com/repos/sendtogeo/Seo-Panel/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/sendtogeo/Seo-Panel/issues/4/comments","events_url":"https://api.github.com/repos/sendtogeo/Seo-Panel/issues/4/events","html_url":"https://github.com/sendtogeo/Seo-Panel/issues/4","id":45454307,"number":4,"title":"Vulnerability","user":{"login":"0x4E0x650x6F","id":1144303,"avatar_url":"https://avatars.githubusercontent.com/u/1144303?v=3","gravatar_id":"","url":"https://api.github.com/users/0x4E0x650x6F","html_url":"https://github.com/0x4E0x650x6F","followers_url":"https://api.github.com/users/0x4E0x650x6F/followers","following_url":"https://api.github.com/users/0x4E0x650x6F/following{/other_user}","gists_url":"https://api.github.com/users/0x4E0x650x6F/gists{/gist_id}","starred_url":"https://api.github.com/users/0x4E0x650x6F/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0x4E0x650x6F/subscriptions","organizations_url":"https://api.github.com/users/0x4E0x650x6F/orgs","repos_url":"https://api.github.com/users/0x4E0x650x6F/repos","events_url":"https://api.github.com/users/0x4E0x650x6F/events{/privacy}","received_events_url":"https://api.github.com/users/0x4E0x650x6F/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2014-10-10T07:46:33Z","updated_at":"2015-10-20T19:41:29Z","closed_at":"2015-10-20T19:41:29Z","body":"to report a sql injection vulnerability in the\r\nseopanel web application.\r\n\r\nThis vulnerability affects Seo Control Panel -\r\nSeo Panel Version 3.6.0\r\ntested in PHP 5.4.4-14+deb7u14\r\nVendor url :http://www.seopanel.in/\r\n\r\nTheir are multiple vulnerabilitis in the project not all of them are\r\nexploitable\r\n\r\nThe Flowing exploit is able to successfull bypass the implemented\r\nprotections based on set of regex with along with a blacklist\r\nthe protections are implemeted in the flowing file:\r\n\r\nfile : includes/sp-load.php\r\nlines: 128 to 150\r\n\r\nThe protection can easly be bypassed with payload used by this exploit\r\n\r\nThe Vulnerable method exploited is located at:\r\nfile: seo-plugins.php\r\nmethod: __getSeoPluginInfo\r\nlines: 175 to 178\r\n\r\nIts possible to bypass the protections in place, an authenticated attacker might be able to use this vulnerability to gain remote code execution privileges."},"comment":{"url":"https://api.github.com/repos/sendtogeo/Seo-Panel/issues/comments/149679875","html_url":"https://github.com/sendtogeo/Seo-Panel/issues/4#issuecomment-149679875","issue_url":"https://api.github.com/repos/sendtogeo/Seo-Panel/issues/4","id":149679875,"user":{"login":"sendtogeo","id":281293,"avatar_url":"https://avatars.githubusercontent.com/u/281293?v=3","gravatar_id":"","url":"https://api.github.com/users/sendtogeo","html_url":"https://github.com/sendtogeo","followers_url":"https://api.github.com/users/sendtogeo/followers","following_url":"https://api.github.com/users/sendtogeo/following{/other_user}","gists_url":"https://api.github.com/users/sendtogeo/gists{/gist_id}","starred_url":"https://api.github.com/users/sendtogeo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sendtogeo/subscriptions","organizations_url":"https://api.github.com/users/sendtogeo/orgs","repos_url":"https://api.github.com/users/sendtogeo/repos","events_url":"https://api.github.com/users/sendtogeo/events{/privacy}","received_events_url":"https://api.github.com/users/sendtogeo/received_events","type":"User","site_admin":false},"created_at":"2015-10-20T19:41:29Z","updated_at":"2015-10-20T19:41:29Z","body":"All fixed in seo panel latest version."}}