Vulnerability Details : CVE-2015-2825
Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the path parameter.
Vulnerability category: Execute code
Exploit prediction scoring system (EPSS) score for CVE-2015-2825
Probability of exploitation activity in the next 30 days: 69.55%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2015-2825
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2015-2825
-
https://www.exploit-db.com/exploits/36614/
WordPress Plugin Simple Ads Manager 2.5.94 - Arbitrary File Upload
-
http://packetstormsecurity.com/files/131282/WordPress-Simple-Ads-Manager-2.5.94-File-Upload.html
WordPress Simple Ads Manager 2.5.94 File Upload ≈ Packet StormExploit
-
https://wordpress.org/plugins/simple-ads-manager/changelog/
Simple Ads Manager – WordPress plugin | WordPress.orgPatch
-
http://www.itas.vn/news/ITAS-Team-found-out-multiple-critical-vulnerabilities-in-Hakin9-IT-Security-Magazine-78.html
ITAS VietNam | ITAS Team found out multiple critical vulnerabilities in Hakin9 IT Security MagazineExploit
-
http://seclists.org/fulldisclosure/2015/Apr/8
Full Disclosure: Wordpress plugin Simple Ads Manager - Arbitrary File UploadExploit
Products affected by CVE-2015-2825
- Simple Ads Manager Project » Simple Ads Manager » For WordpressVersions up to, including, (<=) 2.5.94cpe:2.3:a:simple_ads_manager_project:simple_ads_manager:*:*:*:*:*:wordpress:*:*