CVE-2015-2824 in Simple Ads Manager Plugin

Resumen (Inglés)

Multiple SQL injection vulnerabilities in sam-ajax-admin.php in the Simple Ads Manager plugin 2.5.94 and 2.5.96 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action; the (2) cstr parameter in a load_posts action; the (3) searchTerm parameter in a load_combo_data action; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2015-04-01

Divulgación

2015-04-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
74655	Simple Ads Manager Plugin inyección SQL	89	Alto	No está definido	CVE-2015-2824

Fuentes

• MITRE
• NVD
• CVE Details