CVE-2020-35749 Scanner

The Simple Job Board plugin for WordPress is a widely used tool that allows website owners to manage job postings, applications, and resumes efficiently. It provides a user-friendly interface for job seekers to submit their resumes, which are stored securely for employer review. This plugin is popular among businesses of all sizes due to its ease of installation and robust features, streamlining the hiring process significantly.

CVE-2020-35749 is a directory traversal vulnerability found in the class-simple_job_board_resume_download_handler.php file in versions 2.9.3 and earlier. This vulnerability arises from insufficient input validation, allowing attackers to manipulate file paths and access files outside the intended directory. The flaw is exploited by passing a crafted value to the sjb_file parameter.

The vulnerable endpoint is wp-admin/post.php, where the sjb_file parameter is used to specify the file to download. By injecting path traversal sequences like ../, an attacker can read arbitrary files on the server, such as configuration files containing database credentials or sensitive user data. This attack requires no authentication, making it accessible to remote attackers.

If exploited, an attacker could gain unauthorized access to sensitive information, including WordPress configuration files (wp-config.php), database credentials, and other confidential data. This could lead to further compromise of the website, data breaches, or even full server takeover. The CVSS score of 7.7 highlights the high severity of this vulnerability.