Wordpress plugin Simple Ads Manager SQL Injection through object serialisation


Description   Simple Ads Manager can interpret data as a serialised object, opening access to a SQL injection through a vulnerable parameter.
     
Default
configuration
 
Profiles High Medium Low Internet
Action Block Block Block Block
Alarm Level Major Major Minor Minor
     
References   URL: http://appcheck-ng.com/remote-command-execution-in-wordpress-form-manager-plugin-cve-2015-7806/
     
Available since   ASQ v5.0.0
     
Protects   Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
100 last CVE  


 
 
 
 
 Risk level 
Moderate