CVE-2020-35749 PoC — Wordpress Simple Board Job Plugin 路径遍历漏洞

Source

https://github.com/M4xSec/Wordpress-CVE-2020-35749

Associated Vulnerability

Title: Wordpress Simple Board Job Plugin 路径遍历漏洞 (CVE-2020-35749)
Description:Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

Description

Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) proof of concept exploit

Readme

# Wordpress Plugin Simple Job Board 2.9.3 LFI Vulnerability (CVE-2020-35749) Exploit

## Summary
WordPress Plugin Simple Job Board is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Simple Job Board version 2.9.3 is vulnerable; prior versions may also be affected.

## Remediation
Update to plugin version 2.9.4 or latest

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →