CVE-2020-35749 PoC — Wordpress Simple Board Job Plugin 路径遍历漏洞

Source

https://github.com/M4xSec/Wordpress-CVE-2020-35749

Associated Vulnerability

Title:Wordpress Simple Board Job Plugin 路径遍历漏洞 (CVE-2020-35749)
Description:Wordpress Simple Board Job Plugin是WordPress（Wordpress）基金会的一个可为Wordpress提供招聘功能（工作板）的插件。 WordPress Simple Board Job plugin 2.9.3 and earlier 存在路径遍历漏洞，该漏洞允许远程攻击者通过sjb_file参数读取wp-admin post.php中的任意文件。

Description

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

Readme

# Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) Exploit

## Summary
WordPress Plugin Simple Job Board is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Simple Job Board version 2.9.3 is vulnerable; prior versions may also be affected.

## Remediation
Update to plugin version 2.9.4 or latest

File Snapshot


 [4.0K]  /data/pocs/bb9ab9732bdcd48ad177b0b22f7d82008aecd84c
├── [3.1K]  CVE-2020-35749.py
└── [ 510]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!