Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html | Exploit Third Party Advisory VDB Entry |
| http://www.securityfocus.com/archive/1/533904/100/0/threaded | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/70916 | Third Party Advisory VDB Entry |
| https://wordpress.org/plugins/bulletproof-security/changelog/ | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Dec 2021, 18:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html - Exploit, Third Party Advisory, VDB Entry | |
| References | (BUGTRAQ) http://www.securityfocus.com/archive/1/533904/100/0/threaded - Third Party Advisory, VDB Entry | |
| References | (BID) http://www.securityfocus.com/bid/70916 - Third Party Advisory, VDB Entry |
24 Sep 2021, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ait-pro:bulletproof-security:.46.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.45.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.45.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.45.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.50:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.45.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.45.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.48.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.49.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.45.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.47.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof-security:.46.5:*:*:*:*:wordpress:*:* |
cpe:2.3:a:ait-pro:bulletproof_security:.47.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.45.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.45.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.45.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.45.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.6:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.3:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.1:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.45.7:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.47.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.8:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.48.2:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.50:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.45.4:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.5:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.49.9:*:*:*:*:wordpress:*:* cpe:2.3:a:ait-pro:bulletproof_security:.46.5:*:*:*:*:wordpress:*:* |
Information
Published : 2014-11-06 15:55
Updated : 2024-02-04 18:35
NVD link : CVE-2014-7958
Mitre link : CVE-2014-7958
CVE.ORG link : CVE-2014-7958
JSON object : View
Products Affected
ait-pro
- bulletproof_security
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')