CVE-2020-35749
HIGH NUCLEISimple Board Job < 2.9.3 - Authenticated Path Traversal via sjb_file Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-35749. PoCs published by SunCSR Team, Ven3xy, M4xSec. A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an authenticated directory traversal vulnerability in the WordPress plugin 'Simple JobBoard' versions prior to 2.9.3, allowing arbitrary file read with web server privileges.
Description
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.
Exploits (3)
This Metasploit module exploits an authenticated directory traversal vulnerability in the WordPress plugin 'Simple JobBoard' versions prior to 2.9.3, allowing arbitrary file read with web server privileges.
This exploit targets a Local File Inclusion (LFI) vulnerability in WordPress Plugin Simple Job Board 2.9.3 (CVE-2020-35749). It authenticates as a user and fetches arbitrary files from the server by manipulating the 'sjb_file' parameter.
This repository contains a functional Python exploit for CVE-2020-35749, a Local File Inclusion (LFI) vulnerability in the WordPress Simple Job Board plugin (version 2.9.3). The exploit authenticates to WordPress and leverages a path traversal flaw in the 'sjb_file' parameter to read arbitrary files from the server.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N