CVEs-PoC/2020/CVE-2020-35749.md

CVE-2020-35749

Description

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

POC

Reference

• http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html
• http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Enes4xd/Enes4xd
• https://github.com/M4xSec/Wordpress-CVE-2020-35749
• https://github.com/cr0ss2018/cr0ss2018
• https://github.com/ezelnur6327/Enes4xd
• https://github.com/ezelnur6327/enesamaafkolan
• https://github.com/ezelnur6327/ezelnur6327
• https://github.com/nomi-sec/PoC-in-GitHub