CVE-2015-5533

HIGH

WordPress Count Per Day <3.4.1 - SQL Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-5533. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary This PoC demonstrates a SQL Injection vulnerability in the Count Per Day WordPress plugin (version 3.4 and prior) via the 'cpd_keep_month' POST parameter. It uses DNS exfiltration to extract database information, such as the MySQL version, by forcing a DNS lookup to an attacker-controlled domain.

Description

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.

Exploits (1)

exploitdb WORKING POC

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/37707

View Code ZIP pw:eip

This PoC demonstrates a SQL Injection vulnerability in the Count Per Day WordPress plugin (version 3.4 and prior) via the 'cpd_keep_month' POST parameter. It uses DNS exfiltration to extract database information, such as the MySQL version, by forcing a DNS lookup to an attacker-controlled domain.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Count Per Day WordPress plugin <= 3.4

Auth required

Prerequisites: Administrative access to WordPress · Database hosted on Windows for DNS exfiltration

MITRE ATT&CK