CVE:CVE-2014-7959
CNNVD:CNNVD-201411-186
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。BulletProof Security是其中的一款防暴力破解的安全插件。
WordPress BulletProof Security插件.51及之前版本的admin/htaccess/bpsunlock.php脚本存在SQL注入漏洞。远程攻击者可借助‘tableprefix’参数利用该漏洞执行任意SQL命令。
solution:Upgrade ait-pro bulletproof_security to a higher version than .44,.44.1,.45,.45.1,.45.2,.45.3,.45.4,.45.5,.45.6,.45.7,.45.8,.45.9,.46,.46.1,.46.2,.46.3,.46.4,.46.5,.46.6,.46.7,.46.8,.46.9,.47,.47.1,.47.2,.47.3,.47.4,.47.5,.47.6,.47.7,.47.8,.47.9,.48,.48.1,.48.2,.48.3,.48.4,.48.5,.48.6,.48.7,.48.8,.48.9,.49,.49.1,.49.2,.49.3,.49.4,.49.5,.49.6,.49.7,.49.8,.49.9,.50,.50.1,.50.2,.50.3,.50.4,.50.5,.50.6,.50.7,.50.8,.50.9,.51,and avoid the version .44,.44.1,.45,.45.1,.45.2,.45.3,.45.4,.45.5,.45.6,.45.7,.45.8,.45.9,.46,.46.1,.46.2,.46.3,.46.4,.46.5,.46.6,.46.7,.46.8,.46.9,.47,.47.1,.47.2,.47.3,.47.4,.47.5,.47.6,.47.7,.47.8,.47.9,.48,.48.1,.48.2,.48.3,.48.4,.48.5,.48.6,.48.7,.48.8,.48.9,.49,.49.1,.49.2,.49.3,.49.4,.49.5,.49.6,.49.7,.49.8,.49.9,.50,.50.1,.50.2,.50.3,.50.4,.50.5,.50.6,.50.7,.50.8,.50.9,.51