CVE-2020-35749

This Metasploit module exploits an authenticated directory traversal vulnerability in the WordPress plugin 'Simple JobBoard' versions prior to 2.9.3, allowing arbitrary file read with web server privileges.

This exploit targets a Local File Inclusion (LFI) vulnerability in WordPress Plugin Simple Job Board 2.9.3 (CVE-2020-35749). It authenticates as a user and fetches arbitrary files from the server by manipulating the 'sjb_file' parameter.

This repository contains a functional Python exploit for CVE-2020-35749, a Local File Inclusion (LFI) vulnerability in the WordPress Simple Job Board plugin (version 2.9.3). The exploit authenticates to WordPress and leverages a path traversal flaw in the 'sjb_file' parameter to read arbitrary files from the server.