Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-3434

Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter.

Published

2012-08-15T21:55:03.713

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	tom_braider	count_per_day	≤ 3.1	Yes
Application	tom_braider	count_per_day	1.0	Yes
Application	wordpress	wordpress	-	No

References

http://plugins.trac.wordpress.org/changeset/571926/count-per-day Exploit, Patch ([email protected])
http://secunia.com/advisories/49692 Exploit, Vendor Advisory ([email protected])
http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt Exploit ([email protected])
http://www.openwall.com/lists/oss-security/2012/07/24/4 ([email protected])
http://www.openwall.com/lists/oss-security/2012/07/27/2 ([email protected])
http://www.osvdb.org/83491 Exploit ([email protected])
http://www.tomsdimension.de/wp-plugins/count-per-day ([email protected])
http://plugins.trac.wordpress.org/changeset/571926/count-per-day Exploit, Patch (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/49692 Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2012/07/24/4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2012/07/27/2 (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/83491 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.tomsdimension.de/wp-plugins/count-per-day (af854a3a-2127-422b-91ae-364da2661108)