.. / CVE-2020-35749

• LFI
• Nuclei
• Web

Exploit for WordPress Simple Job Board <2.9.4 - Local File Inclusion (CVE-2020-35749)

Description:

WordPress Simple Job Board prior to version 2.9.4 is vulnerable to arbitrary file retrieval vulnerabilities because it does not validate the sjb_file parameter when viewing a resume, allowing an authenticated user with the download_resume capability (such as HR users) to download arbitrary files from the web-server via local file inclusion.

Nuclei Template

View the template here CVE-2020-35749.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-35749.yaml

References: