This host is running Seo Panel and is prone to multiple Cross- site scripting vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitrary HTML and script code in a user's browser session in the context of an affected site and potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Impact Level: Application

Upgrade to version 2.2.0 or later, For updates refer to http://sourceforge.net/projects/seopanel/files

The flaws are caused by improper validation of user-supplied input by the 'index.ctrl.php' or 'controllers/settings.ctrl.php' scripts. A remote attacker could exploit this vulnerability using the default_news or sponsors parameter to inject malicious script into a Web page.

Seo Panel version 2.2.0

• http://www.exploit-db.com/exploits/16000/
• http://www.securityfocus.com/archive/1/archive/1/515768/100/0/threaded
• http://xforce.iss.net/xforce/xfdb/64725

---

Updated on 2015-03-25