CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - 未認証（限定）リモートコード実行 説明: WordPress用Time ClockプラグインおよびTime Clock Proプラグインは、'etimeclockwploadfunctioncallback'関数を介して、バージョン（Time Clockは1.2.2まで、Time Clock...

CVE-2024-9593-Exploit

CVE-2024-9593-漏洞利用 WordPress 的 Time Clock 插件和 Time Clock Pro 插件在版本 1.2.2（Time Clock）及 1.1.4（Time Clock Pro）及之前版本中，通过 'etimeclockwploadfunctioncallback' 函数存在远程代码执行漏洞。这允许未认证的攻击者在服务器上执行代码。无法指定所调用函数的参数。 用法： root@kitploit: usage: CVE-2024-9593.py -h -u URL -p PHPINFO CVE-2024-9593 Unauthenticated Remo...

CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

WordPress Time Clock Pro plugin <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution vulnerability

Unauthenticated Limited Remote Code Execution vulnerability discovered by István Márton in WordPress Plugin Time Clock Pro versions = 1.1.4...

WordPress Time Clock Pro Plugin <= 1.1.4 is vulnerable to Remote Code Execution (RCE)

Software Time Clock Pro Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-9593 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 9837dd0a77ff Credits István Márton Required privilege...

WordPress plugin Time Clock plugin and Time Clock Pro 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...