WordPress Media Library Assistant 3.09 LFI / Remote Code Execution ≈ Packet Storm

WordPress Media Library Assistant 3.09 LFI / Remote Code Execution ≈ Packet Storm

Home[1] Files[2] News[3] &[SERVICES_TAB] Contact[4] Add New[5]

WordPress Media Library Assistant 3.09 LFI / Remote Code Execution[6]
Authored by Florent Montel[7] | Site patrowl.io[8]

WordPress Media Library Assistant plugin versions prior to 3.10 are affected by an unauthenticated remote reference to Imagick() conversion which allows attacker to perform local file inclusion and remote code execution depending on the Imagick configuration on the remote server.

advisories | CVE-2023-4634[9]
SHA-256 | 215d90f7b23ba2c6491523ea488e0b6086485144b12a9481dd5f5a3182326981

Login[13] or Register[14] to add favorites

File Archive:

September 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa

File Tags

File Archives

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services[119]
Hosting By
Rokasec[120]
close
Image

Pensée du jour :

Ce que l'homme a fait ,

l'homme peut le défaire.

 

"No secure path in the world"