CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - 인증되지 않은 제한된 원격 코드 실행 설명: WordPress용 Time Clock 플러그인 및 Time Clock Pro 플러그인은 버전 1.2.2 Time Clock 및 1.1.4 Time Clock Pro까지, 'etimeclockwploadfunctioncallback' 함수를 통해 원격 코드 실행에 취약합니다. 이를 통해 인증되지 않은 공격자가 서버에서 코드를 실행할 수 있습니다. 호출된 함수의 매개변수는 지정할...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit WordPress용 Time Clock 플러그인 및 Time Clock Pro 플러그인은 'etimeclockwploadfunctioncallback' 함수를 통해 Time Clock의 경우 1.2.2까지, Time Clock Pro의 경우 1.1.4까지의 버전에서 원격 코드 실행에 취약합니다. 이를 통해 인증되지 않은 공격자가 서버에서 코드를 실행할 수 있습니다. 호출되는 함수의 매개변수는 지정할 수 없습니다. 사용법: usage: CVE-2024-9593.py -h -u URL -p...

CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

WordPress Time Clock Pro plugin <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution vulnerability

Unauthenticated Limited Remote Code Execution vulnerability discovered by István Márton in WordPress Plugin Time Clock Pro versions = 1.1.4...

WordPress Time Clock Pro Plugin <= 1.1.4 is vulnerable to Remote Code Execution (RCE)

Software Time Clock Pro Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-9593 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 9837dd0a77ff Credits István Márton Required privilege...

WordPress plugin Time Clock plugin and Time Clock Pro 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...

CVE-2024-9593: Improper Control of Generation of Code

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...