Lucene search
Daniel RufWPVDB-ID:A9BCC68C-EEDA-4647-8463-E7E136733053HistoryAug 01, 2022 - 12:00 a.m.
Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
2022-08-0100:00:00
Daniel Ruf
wpscan.com
12
0.011 Low
EPSS
Percentile
84.7%
The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Directory Listing which allows the download of uploaded resumes.
PoC
curl https://example.com/wp-content/uploads/wpjobboard Search for this path / folder in search engines to find uploaded resumes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ninja-job-board | lt | 1.3.3 |
Related
cve
cve
CVE-2022-2544
2022-08-22 15:15:15
wpexploit
wpexploit
Ninja Job Board < 1.3.3 - Resume Disclosure via Directory Listing
2022-08-01 00:00:00
nvd
nvd
CVE-2022-2544
2022-08-22 15:15:15
patchstack
patchstack
nuclei
nuclei
WordPress Ninja Job Board < 1.3.3 - Direct Request
2022-09-16 22:38:40
prion
prion
Design/Logic Flaw
2022-08-22 15:15:00
cvelist
cvelist