Exploit for CVE-2023-4634

🗓️ 05 Sep 2023 07:44:15Reported by PatrowlType

Unauthenticated RCE vulnerability in Media-Library-Assistant Wordpress Plugin < 3.10 (CVE-2023-4634), requires Imagick libraries, default configuration, and external network connectivity. Exploitation allows for RCE, LFI, basic DNS check detection using CVE-2023-4634.py, and requires setting up FTP and HTTP servers as detailed

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for CVE-2023-4634	4 Feb 202617:59	–	githubexploit
0day.today	Wordpress Media Library Assistant Plugin - Remote Code Execution / Local File Inclusion Exploit	9 Oct 202300:00	–	zdt
BDU FSTEC	The vulnerability of the Imagick() function (~/includes/mla-stream-image.php) of the Media Library Assistant plugin of the WordPress content management system allows a hacker to execute arbitrary code.	11 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-4634	5 Sep 202311:57	–	circl
CNNVD	WordPress plugin Media Library Assistant security vulnerability	6 Sep 202300:00	–	cnnvd
CVE	CVE-2023-4634	6 Sep 202308:27	–	cve
Cvelist	CVE-2023-4634 Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution	6 Sep 202308:27	–	cvelist
Exploit DB	Media Library Assistant Wordpress Plugin - RCE and LFI	9 Oct 202300:00	–	exploitdb
Nuclei	Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion	16 Jun 202607:13	–	nuclei
NVD	CVE-2023-4634	6 Sep 202309:15	–	nvd