ID de Prueba:	1.3.6.1.4.1.25623.1.0.805520
Categoría:	Web application abuses
Título:	WordPress Simple Ads Manager Plugin < 2.7.97 Multiple Vulnerabilities - Active Check
Resumen:	The WordPress Simple Ads Manager plugin is prone to multiple; vulnerabilities.
Descripción:	Summary: The WordPress Simple Ads Manager plugin is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - The sam-ajax-admin.php script not properly sanitizing user-supplied input to the 'cstr', 'searchTer', 'subscriber', 'contributor', 'author', 'editor', 'admin', and 'sadmin' POST parameters. - The error in handling a specially crafted POST request sent for the /sam-ajax-admin.php script with the 'action' parameter set to values such as 'load_users', 'load_authors', 'load_cats', 'load_tags', 'load_posts', 'posts_debug', or 'load_stats'. Vulnerability Impact: Successful exploitation will allow remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data and gain access to potentially sensitive information. Affected Software/OS: WordPress Simple Ads Manager plugin versions 2.5.94 and 2.6.96 are known to be affected. Other versions might be affected as well. Solution: Update to version 2.7.97 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2824 BugTraq ID: 73698 http://www.securityfocus.com/bid/73698 Bugtraq: 20150402 Wordpress plugin Simple Ads Manager - Multiple SQL Injection (Google Search) http://www.securityfocus.com/archive/1/535168/100/0/threaded Bugtraq: 20150402 Wordpress plugin Simple Ads Manager - SQL Injection (Google Search) http://www.securityfocus.com/archive/1/535165/100/0/threaded https://www.exploit-db.com/exploits/36613/ http://seclists.org/fulldisclosure/2015/Apr/7 http://seclists.org/fulldisclosure/2015/Apr/6 http://packetstormsecurity.com/files/131280/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-SQL-Injection.html http://www.itas.vn/news/ITAS-Team-found-out-multiple-critical-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html Common Vulnerability Exposure (CVE) ID: CVE-2015-2826 BugTraq ID: 73924 http://www.securityfocus.com/bid/73924 Bugtraq: 20150402 Wordpress plugin Simple Ads Manager - Information Disclosure (Google Search) http://www.securityfocus.com/archive/1/535170/100/1200/threaded https://www.exploit-db.com/exploits/36615/ http://seclists.org/fulldisclosure/2015/Apr/10 http://packetstormsecurity.com/files/131281/WordPress-Simple-Ads-Manager-2.5.94-2.5.96-Information-Disclosure.html
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.