Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。Simple Ads Manager是其中的一个用于管理广告的插件。 WordPress Simple Ads Manager插件2.5.96之前版本的sam-ajax-admin.php文件中存在任意文件上传漏洞。远程攻击者可通过上传可执行文件，并发送直接的请求访问该文件利用该漏洞执行任意代码。
WordPress Simple Ads Manager 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/36614
https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-simple-ads-manager-arbitrary-file-upload-2-5-94/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simple-ads-manager/simple-ads-manager-2594-arbitrary-file-upload
https://www.cve.org/CVERecord?id=CVE-2015-2825
https://wpscan.com/vulnerability/89f75c74-4126-467b-aadd-04b1c1bbc941/
https://pentest-tools.com/vulnerabilities-exploits/wordpress-simple-ads-manager-plugin-file-upload-vulnerability_11471