CVE-2014-7959 BulletProof Security < .51.1 - SQL Injection
MediumCVSS 6.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ait-pro bulletproof security | = .44 | No fix listed |
| ait-pro bulletproof security | = .44.1 | No fix listed |
| ait-pro bulletproof security | = .45 | No fix listed |
| ait-pro bulletproof security | = .45.1 | No fix listed |
| ait-pro bulletproof security | = .45.2 | No fix listed |
| ait-pro bulletproof security | = .45.3 | No fix listed |
| ait-pro bulletproof security | = .45.4 | No fix listed |
| ait-pro bulletproof security | = .45.5 | No fix listed |
| ait-pro bulletproof security | = .45.6 | No fix listed |
| ait-pro bulletproof security | = .45.7 | No fix listed |
| ait-pro bulletproof security | = .45.8 | No fix listed |
| ait-pro bulletproof security | = .45.9 | No fix listed |
| ait-pro bulletproof security | = .46 | No fix listed |
| ait-pro bulletproof security | = .46.1 | No fix listed |
| ait-pro bulletproof security | = .46.2 | No fix listed |
| ait-pro bulletproof security | = .46.3 | No fix listed |
| ait-pro bulletproof security | = .46.4 | No fix listed |
| ait-pro bulletproof security | = .46.5 | No fix listed |
| ait-pro bulletproof security | = .46.6 | No fix listed |
| ait-pro bulletproof security | = .46.7 | No fix listed |
| ait-pro bulletproof security | = .46.8 | No fix listed |
| ait-pro bulletproof security | = .46.9 | No fix listed |
| ait-pro bulletproof security | = .47 | No fix listed |
| ait-pro bulletproof security | = .47.1 | No fix listed |
| ait-pro bulletproof security | = .47.2 | No fix listed |
Show 39 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ait-pro bulletproof security | = .47.3 | No fix listed |
| ait-pro bulletproof security | = .47.4 | No fix listed |
| ait-pro bulletproof security | = .47.5 | No fix listed |
| ait-pro bulletproof security | = .47.6 | No fix listed |
| ait-pro bulletproof security | = .47.7 | No fix listed |
| ait-pro bulletproof security | = .47.8 | No fix listed |
| ait-pro bulletproof security | = .47.9 | No fix listed |
| ait-pro bulletproof security | = .48 | No fix listed |
| ait-pro bulletproof security | = .48.1 | No fix listed |
| ait-pro bulletproof security | = .48.2 | No fix listed |
| ait-pro bulletproof security | = .48.3 | No fix listed |
| ait-pro bulletproof security | = .48.4 | No fix listed |
| ait-pro bulletproof security | = .48.5 | No fix listed |
| ait-pro bulletproof security | = .48.6 | No fix listed |
| ait-pro bulletproof security | = .48.7 | No fix listed |
| ait-pro bulletproof security | = .48.8 | No fix listed |
| ait-pro bulletproof security | = .48.9 | No fix listed |
| ait-pro bulletproof security | = .49 | No fix listed |
| ait-pro bulletproof security | = .49.1 | No fix listed |
| ait-pro bulletproof security | = .49.2 | No fix listed |
| ait-pro bulletproof security | = .49.3 | No fix listed |
| ait-pro bulletproof security | = .49.4 | No fix listed |
| ait-pro bulletproof security | = .49.5 | No fix listed |
| ait-pro bulletproof security | = .49.6 | No fix listed |
| ait-pro bulletproof security | = .49.7 | No fix listed |
| ait-pro bulletproof security | = .49.8 | No fix listed |
| ait-pro bulletproof security | = .49.9 | No fix listed |
| ait-pro bulletproof security | = .50 | No fix listed |
| ait-pro bulletproof security | = .50.1 | No fix listed |
| ait-pro bulletproof security | = .50.2 | No fix listed |
| ait-pro bulletproof security | = .50.3 | No fix listed |
| ait-pro bulletproof security | = .50.4 | No fix listed |
| ait-pro bulletproof security | = .50.5 | No fix listed |
| ait-pro bulletproof security | = .50.6 | No fix listed |
| ait-pro bulletproof security | = .50.7 | No fix listed |
| ait-pro bulletproof security | = .50.8 | No fix listed |
| ait-pro bulletproof security | = .50.9 | No fix listed |
| ait-pro bulletproof security | = .51 | No fix listed |
| wordpress bulletproof-security(WordPress) | < .51.1 | .51.1 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20141105 Wordpress bulletproof-security <=.51 multiple vulnerabilities mailing-list third-party-advisory vdb-entry
- 70918 third-party-advisory vdb-entry
- wordpress.org patch vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org