CVE-2015-2825
Simple Ads Manager < 2.5.94 - Unauthenticated Arbitrary File Upload via sam-ajax-admin.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-2825. PoCs published by ITAS Team.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in the WordPress plugin Simple Ads Manager. The vulnerable endpoint allows unauthenticated file uploads via a multipart form request, enabling remote code execution by uploading a malicious PHP file.
Description
Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the path parameter.
Exploits (1)
This exploit demonstrates an arbitrary file upload vulnerability in the WordPress plugin Simple Ads Manager. The vulnerable endpoint allows unauthenticated file uploads via a multipart form request, enabling remote code execution by uploading a malicious PHP file.