NVD

Id
35225  
Name
CVE-2014-7958  
Description
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-11-06  
Modified Date
2015-05-08  
Seq
2014-7958  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180418 35225 CVE-2014-7958 http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html  View
180419 35225 CVE-2014-7958 20141105 Wordpress bulletproof-security <=.51 multiple vulnerabilities  View
180420 35225 CVE-2014-7958 70916  View
180421 35225 CVE-2014-7958 https://wordpress.org/plugins/bulletproof-security/changelog/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16380 JVNDB-2014-005255 WordPress 用 BulletProof Security プラグインの admin/htaccess/bpsunlock.php におけるクロスサイトスクリプティングの脆弱性 WordPress 用 BulletProof Security プラグインの admin/htaccess/bpsunlock.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-7958 75251 CVE-2014-7958 35225 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005255.html 2014-11-05 2014-11-07 View