{"api_version":"1","generated_at":"2026-07-23T09:56:22+00:00","cve":"CVE-2014-1855","urls":{"html":"https://cve.report/CVE-2014-1855","api":"https://cve.report/api/cve/CVE-2014-1855.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-1855","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-1855"},"summary":{"title":"CVE-2014-1855","description":"Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-05-20 14:55:05","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://www.htbridge.com/advisory/HTB23200","name":"https://www.htbridge.com/advisory/HTB23200","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"File Not Found","mime":"text/html","httpstatus":"404","archivestatus":"403"},{"url":"http://forum.seopanel.in/viewtopic.php?f=7&t=10978","name":"http://forum.seopanel.in/viewtopic.php?f=7&t=10978","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Seo Panel Forum • View topic - Seo Panel 3.5.0 Released","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/58706","name":"http://secunia.com/advisories/58706","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA58706 - Seo Panel "keyword" Cross-Site Scripting Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/532119/100/0/threaded","name":"http://www.securityfocus.com/archive/1/532119/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html","name":"http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Seo Panel 3.4.0 Cross Site Scripting ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1855","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1855","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"1855","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"seopanel","cpe5":"seo_panel","cpe6":"3.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1855","vulnerable":"1","versionEndIncluding":"3.4.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"seopanel","cpe5":"seo_panel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:58:15.367Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.htbridge.com/advisory/HTB23200"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://forum.seopanel.in/viewtopic.php?f=7&t=10978"},{"name":"58706","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/58706"},{"name":"20140516 Two Cross-Site Scripting (XSS) Vulnerabilities in Seo Panel","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/532119/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-05-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-09T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"https://www.htbridge.com/advisory/HTB23200"},{"tags":["x_refsource_CONFIRM"],"url":"http://forum.seopanel.in/viewtopic.php?f=7&t=10978"},{"name":"58706","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/58706"},{"name":"20140516 Two Cross-Site Scripting (XSS) Vulnerabilities in Seo Panel","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/532119/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-1855","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://www.htbridge.com/advisory/HTB23200","refsource":"MISC","url":"https://www.htbridge.com/advisory/HTB23200"},{"name":"http://forum.seopanel.in/viewtopic.php?f=7&t=10978","refsource":"CONFIRM","url":"http://forum.seopanel.in/viewtopic.php?f=7&t=10978"},{"name":"58706","refsource":"SECUNIA","url":"http://secunia.com/advisories/58706"},{"name":"20140516 Two Cross-Site Scripting (XSS) Vulnerabilities in Seo Panel","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/532119/100/0/threaded"},{"name":"http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-1855","datePublished":"2014-05-20T14:00:00.000Z","dateReserved":"2014-02-02T00:00:00.000Z","dateUpdated":"2024-08-06T09:58:15.367Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-05-20 14:55:05","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seopanel:seo_panel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.0","matchCriteriaId":"68F54972-D048-490F-A7E4-7A5AA345F771"},{"vulnerable":true,"criteria":"cpe:2.3:a:seopanel:seo_panel:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C8F8D34F-DC94-43A6-B13C-3FD08350F604"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"1855","Ordinal":"1","Title":"CVE-2014-1855","CVE":"CVE-2014-1855","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"1855","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php.","Type":"Description","Title":"CVE-2014-1855"},{"CveYear":"2014","CveId":"1855","Ordinal":"2","NoteData":"2014-05-20","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"1855","Ordinal":"3","NoteData":"2018-10-09","Type":"Other","Title":"Modified"}]}}}