CVE-2022-1166 | BDVDB-2026-173174 Detail

Noo JobMonster

Description#

The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the web server, vendors can also take measures to make it less likely to happen.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://wpscan.com/vulnerability/ea6646ac-f71f-4340-965d-fab272da5189
https://themeforest.net/item/jobmonster-job-board-wordpress-theme/10965446

Exploit#

No public exploit known

History#

Version 12022-04-04Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.