CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrawlSpider SEO Change Monitor – Track Website Changes.This issue affects SEO Change Monitor – Track Website Changes: from n/a through 1.2.
Explanation of Vulnerability in Simple Terms
SEO Change Monitor versions up to 1.2 contain a SQL injection vulnerability in a database query that processes user input without proper sanitization. An attacker with low-level site access can inject malicious SQL commands to read sensitive data from the database, including user credentials and site configuration. The vulnerability also allows limited disruption of site availability.
What an attacker can do
Read sensitive data from the site database, including user credentials and configuration details.
Potential impact on your site
Unauthorized access to user accounts, exposure of database contents, and potential site instability.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
