CVE-2020-35749

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php.

• CWE-22

• http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.htmlExploit, Third Party Advisory, VDB Entry
• https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharingExploit, Third Party Advisory
• http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.htmlExploit, Third Party Advisory, VDB Entry
• https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharingExploit, Third Party Advisory

Published

Jan 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35740HGiga MailSherlock does not validate specific URL parameters…6.1
• CVE-2020-35741HGiga MailSherlock does not validate user parameters on mult…6.1
• CVE-2020-35742HGiga MailSherlock contains a vulnerability of SQL Injection…7.6
• CVE-2020-35743HGiga MailSherlock contains a SQL injection flaw. Attackers …7.6
• CVE-2020-35745PHPGURUKUL Hospital Management System V 4.0 does not properl…8.8
• CVE-2020-35748Cross-site scripting (XSS) vulnerability in models/list-tabl…5.4
• CVE-2020-35752Baby Care System 1.0 is affected by a cross-site scripting (…5.4
• CVE-2020-35753The job posting recommendation form in Persis Human Resource…6.1
• CVE-2020-35754OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an a…7.2
• CVE-2020-35755An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…7.5
• CVE-2020-35756An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…7.5
• CVE-2020-35757An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…9.8