WordPress Simple Ads Manager Plugin Arbitrary File Inclusion (CVE-2015-2825)

A File Inclusion vulnerability exists in WordPress Simple Ads Manager Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

Simple Ads Manager <= 2.9.4.116 - SQL Injection

The simple-ads-manager WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Simple Ads Manager Plugin <= 2.9.4.116 - SQL Injection

This plugin is prone to an SQL injection vulnerability, because $whereClause and $whereClauseT and $whereClauseW and $whereClause2W are not escaped. Solution Upgrade the plugin...

WordPress Simple Ads Manager 2.9.4.116 SQL Injection

Exploit Title: Simple Ads Manager 2.9.4.116 SQL Injection Date: 30-12-2015 Software Link: https://wordpress.org/plugins/simple-ads-manager/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $whereClause and...

WordPress Plugin Simple Ads Manager 2.9.4.116 - SQL Injection

WordPress Plugin Simple Ads Manager 2.9.4.116 - SQL Injection / Exploit Title: Simple Ads Manager 2.9.4.116 SQL Injection Date: 30-12-2015 Software Link: https://wordpress.org/plugins/simple-ads-manager/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

Wordpress simple-ads-manager Information Disclosure (CVE-2015-2826)

An information disclosure vulnerability has been reported in "Wordpress simple-ads-manager plug-in". The vulnerability is due to improper sanitizing of the sam-ajax-admin.php script. Successful exploitation will allow a remote attacker to reveal the user's sensitive information...

WordPress Simple Ads Manager Plugin Remote Denial of Service Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Simple Ads Manager is one of the plug-ins used to manage ads. A remote denial of service vulnerability exists in th...

Wordpress Simple Ads Manager Arbitrary File Upload - Ver2 (CVE-2015-2825)

Unrestricted file upload vulnerability has been reported in Simple Ads Manager plugin for WordPress. Successful exploitation of this vulnerability would allow remote attackers to execute code in the server...

Wordpress plugin Simple Ads Manager - Arbitrary File Upload

Vulnerability title: Wordpress plugin Simple Ads Manager - Arbitrary File Upload Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 Download link: https://wordpress.org/plugins/simple-ads-manager/ CVE ID:...

Wordpress plugin Simple Ads Manager - Multiple SQL Injection

Vulnerability title: Wordpress plugin Simple Ads Manager - Multiple SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CV...

Wordpress plugin Simple Ads Manager - SQL Injection

Vulnerability title: Wordpress plugin Simple Ads Manager - SQL Injection Product: Wordpress plugin Simple Ads Manager Vendor: https://profiles.wordpress.org/minimus/ Affected version: Simple Ads Manager 2.5.94 and 2.5.96 Download link: https://wordpress.org/plugins/simple-ads-manager/ CVE ID:...

WordPress Simple Ads Manager 2.9.4.116 SQL Injection

SQL Injection vulnerability in WordPress Simple Ads Manager plugin sam-ajax-loader.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Simple Ads Manager File Upload

File upload vulnerability in WordPress Simple Ads Manager plugin sam-ajax-admin.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Simple Ads Manager SQL Injection

SQL injection vulnerability in WordPress Simple Ads Manager plugin sam-ajax-admin.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Simple Ads Manager Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Simple Ads Manager is an ad management plugin for wordpress. An arbitrary file upload vulnerability ...

CVE-2015-2825

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

CVE-2015-2825

The CVE-2015-2825 vulnerability affects the WordPress Simple Ads Manager plugin (pre-2.5.96). It is an arbitrary/file-upload vulnerability in sam-ajax-admin.php that allows remote attackers to upload a file with an executable extension and later access it via a direct request to the uploaded path...

CVE-2015-2825

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

CVE-2015-2825

Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specifi...

PT-2015-5917

Name of the Vulnerable Software and Affected Versions Simple Ads Manager plugin versions prior to 2.5.96 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the sam-ajax-admin.php file, and then accessing it via a direct...