CVE-2015-2824

🗓️ 06 Apr 2015 15:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

CVE-2015-2824 Multiple SQL injection vulnerabilities in Simple Ads Manager plugin for WordPres

Reporter	Title	Published	Views	Family All 16
0day.today	Wordpress Simple Ads Manager Plugin - Multiple SQL Injection Vulnerability	2 Apr 201500:00	–	zdt
Circl	CVE-2015-2824	2 Apr 201500:00	–	circl
CNVD	WordPress Plugin Simple Ads Manager SQL Injection Vulnerability	7 Apr 201500:00	–	cnvd
Cvelist	CVE-2015-2824	6 Apr 201515:00	–	cvelist
Dsquare	WordPress Simple Ads Manager SQL Injection	1 May 201500:00	–	dsquare
Exploit DB	WordPress Plugin Simple Ads Manager - Multiple SQL Injections	2 Apr 201500:00	–	exploitdb
exploitpack	WordPress Plugin Simple Ads Manager - Multiple SQL Injections	2 Apr 201500:00	–	exploitpack
NVD	CVE-2015-2824	6 Apr 201515:59	–	nvd
OpenVAS	WordPress Simple Ads Manager Plugin < 2.7.97 Multiple Vulnerabilities - Active Check	14 Apr 201500:00	–	openvas
Packet Storm	WordPress Simple Ads Manager 2.5.94 / 2.5.96 SQL Injection	3 Apr 201500:00	–	packetstorm

NVD

Node

simple_ads_manager_project simple_ads_managerMatch2.5.94wordpress

simple_ads_manager_project simple_ads_managerMatch2.5.96wordpress

Source	Link
seclists	www.seclists.org/fulldisclosure/2015/Apr/6
securityfocus	www.securityfocus.com/archive/1/535165/100/0/threaded
seclists	www.seclists.org/fulldisclosure/2015/Apr/7
securityfocus	www.securityfocus.com/bid/73698
itas	www.itas.vn/news/ITAS-Team-found-out-multiple-critical-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html
securityfocus	www.securityfocus.com/archive/1/535168/100/0/threaded
wordpress	www.wordpress.org/plugins/simple-ads-manager/changelog/
packetstormsecurity	www.packetstormsecurity.com/files/131280/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-SQL-Injection.html
exploit-db	www.exploit-db.com/exploits/36613/
plugins	www.plugins.trac.wordpress.org/changeset/1136202/simple-ads-manager

Parameter	Position	Path	Description	CWE
hits[0][]	request body	wp-content/plugins/simple-ads-manager/sam-ajax.php	SQL injection via sam_hits parameter in POST to sam-ajax.php.	CWE-89
hits[1][]	request body	wp-content/plugins/simple-ads-manager/sam-ajax.php	SQL injection via sam_hits parameter in POST to sam-ajax.php.	CWE-89
hits[2][]	request body	wp-content/plugins/simple-ads-manager/sam-ajax.php	SQL injection via sam_hits parameter in POST to sam-ajax.php.	CWE-89
action	request body	wp-content/plugins/simple-ads-manager/sam-ajax.php	SQL injection via sam_hits parameter in POST to sam-ajax.php.	CWE-89
level	request body	wp-content/plugins/simple-ads-manager/sam-ajax.php	SQL injection via sam_hits parameter in POST to sam-ajax.php.	CWE-89
cstr	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via cstr parameter in load_posts action to sam-ajax-admin.php.	CWE-89
sp	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via cstr parameter in load_posts action to sam-ajax-admin.php.	CWE-89
spg	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via cstr parameter in load_posts action to sam-ajax-admin.php.	CWE-89
action	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via cstr parameter in load_posts action to sam-ajax-admin.php.	CWE-89
searchTerm	query param	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php?searchTerm=<SQL INJECTION HERE>	SQL injection via searchTerm parameter in load_combo_data action to sam-ajax-admin.php.	CWE-89

06 May 2026 22:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 27.5

EPSS0.11773

CWE-89