CVE-2020-35749 PoC — Wordpress Simple Board Job Plugin 路径遍历漏洞

Source

https://github.com/M4xSec/Wordpress-CVE-2020-35749

Associated Vulnerability

Title:Wordpress Simple Board Job Plugin 路径遍历漏洞 (CVE-2020-35749)
Description:Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

Description

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

Readme

# Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) Exploit

## Summary
WordPress Plugin Simple Job Board is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Simple Job Board version 2.9.3 is vulnerable; prior versions may also be affected.

## Remediation
Update to plugin version 2.9.4 or latest

File Snapshot


 [4.0K]  /data/pocs/bb9ab9732bdcd48ad177b0b22f7d82008aecd84c
├── [3.1K]  CVE-2020-35749.py
└── [ 510]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!