CVE-2015-2824

🗓️ 06 Apr 2015 15:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

CVE-2015-2824 Multiple SQL injection vulnerabilities in Simple Ads Manager plugin for WordPres

Reporter	Title	Published	Views	Family All 16
0day.today	Wordpress Simple Ads Manager Plugin - Multiple SQL Injection Vulnerability	2 Apr 201500:00	–	zdt
Circl	CVE-2015-2824	2 Apr 201500:00	–	circl
CNVD	WordPress Plugin Simple Ads Manager SQL Injection Vulnerability	7 Apr 201500:00	–	cnvd
Cvelist	CVE-2015-2824	6 Apr 201515:00	–	cvelist
Dsquare	WordPress Simple Ads Manager SQL Injection	1 May 201500:00	–	dsquare
Exploit DB	WordPress Plugin Simple Ads Manager - Multiple SQL Injections	2 Apr 201500:00	–	exploitdb
exploitpack	WordPress Plugin Simple Ads Manager - Multiple SQL Injections	2 Apr 201500:00	–	exploitpack
NVD	CVE-2015-2824	6 Apr 201515:59	–	nvd
OpenVAS	WordPress Simple Ads Manager Plugin < 2.7.97 Multiple Vulnerabilities - Active Check	14 Apr 201500:00	–	openvas
Packet Storm	WordPress Simple Ads Manager 2.5.94 / 2.5.96 SQL Injection	3 Apr 201500:00	–	packetstorm

NVD

Node

Source	Link
seclists	www.seclists.org/fulldisclosure/2015/Apr/6
securityfocus	www.securityfocus.com/archive/1/535165/100/0/threaded
seclists	www.seclists.org/fulldisclosure/2015/Apr/7
securityfocus	www.securityfocus.com/bid/73698
itas	www.itas.vn/news/ITAS-Team-found-out-multiple-critical-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html
securityfocus	www.securityfocus.com/archive/1/535168/100/0/threaded
wordpress	www.wordpress.org/plugins/simple-ads-manager/changelog/
packetstormsecurity	www.packetstormsecurity.com/files/131280/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-SQL-Injection.html
exploit-db	www.exploit-db.com/exploits/36613/
plugins	www.plugins.trac.wordpress.org/changeset/1136202/simple-ads-manager

Parameter	Position	Path	Description	CWE
hits	request body	wp-content/plugins/simple-ads-manager/sam-ajax.php	SQL injection via hits[] payload in sam_hits action	CWE-89
cstr	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via cstr parameter in load_posts action	CWE-89
searchTerm	query param	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via searchTerm parameter in load_combo_data (GET/POST with query string)	CWE-89
subscriber	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via multiple role parameters in load_users action	CWE-89
contributor	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via multiple role parameters in load_users action	CWE-89
author	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via multiple role parameters in load_users action	CWE-89
editor	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via multiple role parameters in load_users action	CWE-89
admin	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via multiple role parameters in load_users action	CWE-89
sadmin	request body	wp-content/plugins/simple-ads-manager/sam-ajax-admin.php	SQL injection via multiple role parameters in load_users action	CWE-89

17 Jun 2026 00:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 27.5

EPSS0.06215