CVE-2023-4634

🗓️ 06 Sep 2023 08:27:50Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 202 Views🌐 WEB

CVE-2023-4634: Media Library Assistant plugin for WordPress vulnerable to Local File Inclusion and Remote Code Executio

Reporter	Title	Published	Views	Family All 23
GithubExploit	Exploit for CVE-2023-4634	4 Feb 202617:59	–	githubexploit
GithubExploit	Exploit for CVE-2023-4634	5 Sep 202307:44	–	githubexploit
zdt	Wordpress Media Library Assistant Plugin - Remote Code Execution / Local File Inclusion Exploit	9 Oct 202300:00	–	zdt
BDU FSTEC	Media Library Assistant Imagick Code Execution	11 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-4634	5 Sep 202311:57	–	circl
CNNVD	WordPress plugin Media Library Assistant security vulnerability	6 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-4634 Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution	6 Sep 202308:27	–	cvelist
Exploit DB	Media Library Assistant Wordpress Plugin - RCE and LFI	9 Oct 202300:00	–	exploitdb
Kitploit	CVE-2023-4634-PoC	31 Oct 202619:35	–	kitploit
Kitploit	CVE-2023-4634	31 Oct 202614:48	–	kitploit

NVD

Vulners

Node

davidlingren media_library_assistantRange<3.10wordpress

[
  {
    "vendor": "dglingren",
    "product": "Media Library Assistant",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.09",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
github	www.github.com/Patrowl/CVE-2023-4634/
packetstormsecurity	www.packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgz
patrowl	www.patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf

Parameter	Position	Path	Description	CWE
mla_stream_file	query param	/wp-content/plugins/media-library-assistant/includes/mla-stream-image.php	The Media Library Assistant plugin is vulnerable to LFI and RCE via the mla_stream_file parameter, which allows unauthenticated attackers to supply remote files (e.g., via FTP) for processing by Imagick().	CWE-73
mla_debug	query param	/wp-content/plugins/media-library-assistant/includes/mla-stream-image.php	The Media Library Assistant plugin is vulnerable to LFI and RCE via the mla_stream_file parameter, which allows unauthenticated attackers to supply remote files (e.g., via FTP) for processing by Imagick().	CWE-73
mla_stream_frame	query param	/wp-content/plugins/media-library-assistant/includes/mla-stream-image.php	The Media Library Assistant plugin is vulnerable to LFI and RCE via the mla_stream_file parameter, which allows unauthenticated attackers to supply remote files (e.g., via FTP) for processing by Imagick().	CWE-73
mla_stream_height	query param	/wp-content/plugins/media-library-assistant/includes/mla-stream-image.php	The Media Library Assistant plugin is vulnerable to LFI and RCE via the mla_stream_file parameter, which allows unauthenticated attackers to supply remote files (e.g., via FTP) for processing by Imagick().	CWE-73
mla_stream_width	query param	/wp-content/plugins/media-library-assistant/includes/mla-stream-image.php	The Media Library Assistant plugin is vulnerable to LFI and RCE via the mla_stream_file parameter, which allows unauthenticated attackers to supply remote files (e.g., via FTP) for processing by Imagick().	CWE-73
cmd	query param	/rce_proof.php	A proof-of-concept endpoint demonstrating Remote Code Execution (RCE) via the 'cmd' parameter.	CWE-73