CVE-2015-9230

概要

参考情報

• openwall.com/lists/oss-security/2015/10/27/3 · Exploit
• cxsecurity.com/issue/WLB-2016010011 · Exploit
• cybersecurityworks.com/zerodays/cve-2015-9230-bulletproof.html · Exploit
• forum.ait-pro.com/forums/topic/bps-changelog · Third Party Advisory
• cybersecurityworks/Disclosed · Exploit
• packetstormsecurity.com/files/135125/BulletProof-Security-.52.4-Cross-Site-Scripting.html · Exploit
• wpvulndb.com/vulnerabilities/8224 · Third Party Advisory

bulletproof security のその他の脆弱性

• CVE-2022-1265中 4.8The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privi…
• CVE-2022-0590中 4.8The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege use…
• CVE-2021-39327中 5.3The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly ac…
• CVE-2014-8749中 5.0Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPre…
• CVE-2014-7959中 6.5SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote auth…