CVE-2015-2824 in Simple Ads Manager Plugin
Summary
Multiple SQL injection vulnerabilities in sam-ajax-admin.php in the Simple Ads Manager plugin 2.5.94 and 2.5.96 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action; the (2) cstr parameter in a load_posts action; the (3) searchTerm parameter in a load_combo_data action; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
04/01/2015
Disclosure
04/06/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 74655 | Simple Ads Manager Plugin sql injection | 89 | High | Not defined | CVE-2015-2824 |