CVE-2014-8749

Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...

CVE-2014-8749

Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...

CVE-2014-8749: Undefined Security Weakness

Server-side request forgery SSRF vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter...

PT-2014-8708

Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .51.1 Description A server-side request forgery SSRF issue allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter in the...

CVE-2014-7959

SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter...

PT-2014-8343

Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .51.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the dbhost parameter in the admin/htaccess/bpsunlock.php file...

PT-2014-8344

Name of the Vulnerable Software and Affected Versions BulletProof Security plugin versions prior to .51.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter in the admin/htaccess/bpsunlock.php file. Recommendations For versions...

CVE-2014-7959: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tableprefix parameter...

CVE-2014-7958: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter...