CVE-2014-1855

Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php.

• CWE-79

• http://forum.seopanel.in/viewtopic.php?f=7&t=10978Vendor Advisory
• http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.htmlExploit
• http://secunia.com/advisories/58706Vendor Advisory
• http://www.securityfocus.com/archive/1/532119/100/0/threaded
• https://www.htbridge.com/advisory/HTB23200Exploit
• http://forum.seopanel.in/viewtopic.php?f=7&t=10978Vendor Advisory
• http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.htmlExploit
• http://secunia.com/advisories/58706Vendor Advisory
• http://www.securityfocus.com/archive/1/532119/100/0/threaded
• https://www.htbridge.com/advisory/HTB23200Exploit

Published

May 20, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-1843Directory traversal vulnerability in the web interface in Ti…
• CVE-2014-1845An unspecified setuid root helper in Enlightenment before 0.…
• CVE-2014-1846Enlightenment before 0.17.6 might allow local users to gain …
• CVE-2014-1849Foscam IP camera 11.37.2.49 and other versions, when using t…
• CVE-2014-1850Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-1854SQL injection vulnerability in library/clicktracker.php in t…
• CVE-2014-1858__init__.py in f2py in NumPy before 1.8.1 allows local users…
• CVE-2014-1859(1) core/tests/test_memmap.py, (2) core/tests/test_multiarra…
• CVE-2014-1860Contao CMS through 3.2.4 has PHP Object Injection Vulnerabil…9.8
• CVE-2014-1861The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and…
• CVE-2014-1867suPHP before 0.7.2 source-highlighting feature allows securi…7.8
• CVE-2014-1868Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC…