WordPress Plugin Simple Ads Manager 2.9.4.116 - SQL Injection

WordPress Plugin Simple Ads Manager 2.9.4.116 - SQL Injection / Exploit Title: Simple Ads Manager 2.9.4.116 SQL Injection Date: 30-12-2015 Software Link: https://wordpress.org/plugins/simple-ads-manager/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

Wordpress simple-ads-manager Information Disclosure (CVE-2015-2826)

An information disclosure vulnerability has been reported in "Wordpress simple-ads-manager plug-in". The vulnerability is due to improper sanitizing of the sam-ajax-admin.php script. Successful exploitation will allow a remote attacker to reveal the user's sensitive information...

WordPress Simple Ads Manager Plugin Remote Denial of Service Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Simple Ads Manager is one of the plug-ins used to manage ads. A remote denial of service vulnerability exists in th...

Wordpress Simple Ads Manager Arbitrary File Upload - Ver2 (CVE-2015-2825)

Unrestricted file upload vulnerability has been reported in Simple Ads Manager plugin for WordPress. Successful exploitation of this vulnerability would allow remote attackers to execute code in the server...

Wordpress plugin Simple Ads Manager - SQL Injection

Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CVE ID:...

Wordpress plugin Simple Ads Manager - Multiple SQL Injection

Vulnerability title: Wordpress plugin Simple Ads Manager - Multiple SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CV...

Wordpress plugin Simple Ads Manager - Arbitrary File Upload

Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 Download link: https://wordpress.org/plugins/simple-ads-manager/ CVE ID:...

WordPress Simple Ads Manager File Upload

File upload vulnerability in WordPress Simple Ads Manager plugin sam-ajax-admin.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Simple Ads Manager 2.9.4.116 SQL Injection

SQL Injection vulnerability in WordPress Simple Ads Manager plugin sam-ajax-loader.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Simple Ads Manager SQL Injection

SQL injection vulnerability in WordPress Simple Ads Manager plugin sam-ajax-admin.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Simple Ads Manager Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Simple Ads Manager is an ad management plugin for wordpress. An arbitrary file upload vulnerability ...

CVE-2015-2825

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

CVE-2015-2825

The CVE-2015-2825 vulnerability affects the WordPress Simple Ads Manager plugin (pre-2.5.96). It is an arbitrary/file-upload vulnerability in sam-ajax-admin.php that allows remote attackers to upload a file with an executable extension and later access it via a direct request to the uploaded path...

CVE-2015-2825

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

WordPress Plugin Simple Ads Manager SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Simple Ads Manager is one of the plug-ins used to manage ads. A SQL injection vulnerability exists in the...

CVE-2015-2824

Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a 1 hits parameter in a samhits action to sam-ajax.php; the 2 cstr parameter in a loadposts action to sam-ajax-admin.php; the 3 searchTe...

CVE-2015-2824

CVE-2015-2824 affects the WordPress Simple Ads Manager plugin (versions before 2.7.97). The vulnerability is a SQL injection in multiple parameters exposed via sam-ajax.php and sam-ajax-admin.php: (1) hits[][] in sam_hits, (2) cstr in load_posts, (3) searchTerm in load_combo_data, and (4) multipl...

WordPress Simple Ads Manager 2.5.94 / 2.5.96 SQL Injection

Vulnerability title: Wordpress plugin Simple Ads Manager - Multiple SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CV...

WordPress Simple Ads Manager 2.5.94 / 2.5.96 Information Disclosure

Vulnerability title: Wordpress plugin Simple Ads Manager - Information Disclosure Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CV...

WordPress Simple Ads Manager 2.5.94 File Upload

Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 Download link: https://wordpress.org/plugins/simple-ads-manager/ CVE ID:...