Lucene search
Daniel RufWPVDB-ID:6E096269-EEDC-4614-88CE-6795C4ADF32FHistoryAug 01, 2022 - 12:00 a.m.
Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing
2022-08-0100:00:00
Daniel Ruf
wpscan.com
25
0.001 Low
EPSS
Percentile
40.3%
The plugin is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations.
PoC
curl https://example.com/wp-content/uploads/jobpost Search for this path / folder in search engines to find uploaded resumes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple-job-board | lt | 2.10.0 |
Related
nvd
nvd
CVE-2022-2558
2022-08-22 15:15:15
prion
prion
Code injection
2022-08-22 15:15:00
patchstack
patchstack
cve
cve
CVE-2022-2558
2022-08-22 15:15:15
cvelist
cvelist
wpexploit
wpexploit
Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing
2022-08-01 00:00:00