CVE-2023-4636 PoC — WordPress plugin File Sharing 跨站脚本漏洞

Description

Unauthenticated Remote Code Execution with default Imagick

介绍

## CVE-2023-4636
- The vulnerability in the limelight is an unauthenticated remote code execution (RCE) issue stemming from insufficient controls on file paths occurring during image processing via Imagick. It enables adversaries to supply files via FTP, leading to local file inclusion and remote code execution. Under these conditions, an attacker could potentially take over any unpatched WordPress site. 
## Screenshot
![Screenshot_1](https://github.com/ThatNotEasy/CVE-2023-4636/assets/25004320/6e3b9fbc-a512-4791-a1ec-729e9c504451)
## Requirements
- Python3.7+
## Supported Os
- Linuxer
- Wingays
## Get start with
```
$ git clone https://github.com/ThatNotEasy/CVE-2023-4636
$ cd CVE-2023-4636
$ pip/pip3 install -r requirements.txt
$ python/python3 CVE-2023-4636.py
```
## Footprints Notes
- By using this tool, you agree that you are using it for educational purposes only and that you will not use it for any illegal activity. You also agree to bear all risks associated with the use of this tool. I will not be responsible for direct or indirect damage caused by the use of this tool. Don't suyyyyyyyyyyyyyyyyyyyy me!
## Author
- Pari Malam
## Contacts
[![Telegram](https://img.shields.io/badge/-Telegram-blue)](https://telegram.me/SurpriseMTFK)
[![Discord](https://img.shields.io/badge/-Discord-purple)](https://discordapp.com/users/829404192585678858)

## Credits:
- PatrickOwl

文件快照

备注