Back to search
CVE-2015-5533
Published: Oct 23, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://www.htbridge.com/advisory/HTB23267
x_refsource_MISC
https://plugins.trac.wordpress.org/changeset/1190683/count-per-day
x_refsource_CONFIRM
37707
exploit
x_refsource_EXPLOIT-DB
https://wpvulndb.com/vulnerabilities/8110
x_refsource_MISC
20150722 SQL Injection in Count Per Day WordPress Plugin
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now