CVE-2017-20095

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
unspecified	Simple Ads Manager Plugin	n/a

References

http://seclists.org/fulldisclosure/2017/Feb/80Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?id.97372Permissions Required
http://seclists.org/fulldisclosure/2017/Feb/80Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?id.97372Permissions Required

Timeline

Published: Jun 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-200966.1A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknown part. The manipula CVE-2017-200976.1A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unk CVE-2017-200984.8A vulnerability was found in Admin Custom Login Plugin 2.4.5.2. It has been classified as problematic. Affected is an unknown function. The CVE-2017-200999.8A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown p CVE-2017-201006.1A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionali CVE-2017-201015.7A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do CVE-2017-201025.5A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ge CVE-2017-201038.8A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-CVE-2017-201047.5A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Co CVE-2017-201058.1A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation o CVE-2017-201064.4A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of th CVE-2017-201077.8A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The man