Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing

🗓️ 01 Aug 2022 00:00:00Reported by Daniel RufType

Ninja Job Board version 1.3.3 allows unauthenticated users to access and download uploaded resumes through directory listing vulnerability

Reporter	Title	Published	Views	Family All 7
wpexploit	Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing	1 Aug 202200:00	–	wpexploit
CVE	CVE-2022-2544	22 Aug 202215:15	–	cve
NVD	CVE-2022-2544	22 Aug 202215:15	–	nvd
Patchstack	WordPress Ninja Job Board plugin <= 1.3.1 - Resume Disclosure via Directory Listing	1 Aug 202200:00	–	patchstack
Nuclei	WordPress Ninja Job Board < 1.3.3 - Direct Request	16 Sep 202222:38	–	nuclei
Prion	Design/Logic Flaw	22 Aug 202215:15	–	prion
Cvelist	CVE-2022-2544 Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing	22 Aug 202215:03	–	cvelist

Vulners

Node

wpmanageninja ninja_job_boardRange<1.3.3wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2758420/ninja-job-board/trunk/includes/Classes/File/FileHandler.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2022 00:00Current

0.4Low risk

Vulners AI Score0.4

EPSS0.041