NVD

Id
24811  
Name
CVE-2015-2824  
Description
Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action to sam-ajax.php; the (2) cstr parameter in a load_posts action to sam-ajax-admin.php; the (3) searchTerm parameter in a load_combo_data action to sam-ajax-admin.php; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action to sam-ajax-admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-06  
Modified Date
2016-12-02  
Seq
2015-2824  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131014 24811 CVE-2015-2824 http://packetstormsecurity.com/files/131280/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-SQL-Injection.html  View
131015 24811 CVE-2015-2824 20150405 Wordpress plugin Simple Ads Manager - SQL Injection  View
131016 24811 CVE-2015-2824 20150405 Multiple SQL Injection  View
131017 24811 CVE-2015-2824 http://www.itas.vn/news/ITAS-Team-found-out-multiple-critical-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html  View
131018 24811 CVE-2015-2824 20150402 Wordpress plugin Simple Ads Manager - SQL Injection  View
131019 24811 CVE-2015-2824 20150402 Wordpress plugin Simple Ads Manager - Multiple SQL Injection  View
131020 24811 CVE-2015-2824 73698  View
131021 24811 CVE-2015-2824 https://plugins.trac.wordpress.org/changeset/1136202/simple-ads-manager  View
131022 24811 CVE-2015-2824 https://wordpress.org/plugins/simple-ads-manager/changelog/  View
131023 24811 CVE-2015-2824 36613  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6786 JVNDB-2015-002106 WordPress 用 Simple Ads Manager プラグインの sam-ajax-admin.php における SQL インジェクションの脆弱性 WordPress 用 Simple Ads Manager プラグインの sam-ajax-admin.php には、SQL インジェクションの脆弱性が存在します。 CVE-2015-2824 80049 CVE-2015-2824 24811 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002106.html 2015-04-02 2015-04-30 View