CVE-2014-7958

Exploit

EPSS 0.62%
Veröffentlicht 06.11.2014 15:55:08
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

BulletProof Security < .51.1 - Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.

Mögliche Gegenmaßnahme

BulletProof Security: Update to version .51.1, or a newer patched version

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Weitere Schwachstelleninformationen

SystemWordPress Plugin

≫

Produkt BulletProof Security

Version [*, .51.1)

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ait-pro ≫ Bulletproof Security Version.44 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.44.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.2 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.3 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.4 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.5 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.6 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.7 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.8 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.45.9 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.2 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.3 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.4 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.5 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.6 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.7 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.8 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.46.9 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.2 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.3 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.4 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.5 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.6 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.7 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.8 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.47.9 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.2 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.3 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.4 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.5 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.6 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.7 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.8 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.48.9 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.2 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.3 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.4 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.5 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.6 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.7 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.8 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.49.9 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.1 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.2 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.3 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.4 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.5 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.6 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.7 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.8 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.50.9 SwPlatformwordpress

Ait-pro ≫ Bulletproof Security Version.51 SwPlatformwordpress

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.62%	0.692

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html

Third Party Advisory

Exploit

VDB Entry

http://www.securityfocus.com/archive/1/533904/100/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/70916

Third Party Advisory

VDB Entry

https://wordpress.org/plugins/bulletproof-security/changelog/

Patch