CVE-2015-5533

概要

参考情報

• packetstormsecurity.com/files/132811/WordPress-Count-Per-Day-3.4-SQL-Injection.html · Third Party Advisory
• securityfocus.com/archive/1/536056/100/0/threaded
• plugins.trac.wordpress.org/changeset/1190683/count-per-day · Issue Tracking
• wpvulndb.com/vulnerabilities/8110 · Third Party Advisory
• exploit-db.com/exploits/37707 · Third Party Advisory
• htbridge.com/advisory/HTB23267 · Third Party Advisory

count per day のその他の脆弱性

• CVE-2012-6714中 6.1The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.
• CVE-2013-7472中 6.1The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter.
• CVE-2012-0896中 5.0Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read…