7 matches found
CVE-2024-9593
CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - Esecuzione di codice remoto limitata non autenticata Descrizione: I plugin Time Clock e Time Clock Pro per WordPress sono vulnerabili all'esecuzione di codice remoto nelle versioni fino alla 1.2.2 per Time Clock e 1.1.4 per Time Clock Pr...
CVE-2024-9593-Exploit
CVE-2024-9593-Exploit المكوّن الإضافي Time Clock والمكوّن الإضافي Time Clock Pro لووردبريس عرضة لتنفيذ التعليمات البرمجية عن بُعد في الإصدارات حتى 1.2.2 لـ Time Clock و1.1.4 لـ Time Clock Pro عبر الدالة 'etimeclockwploadfunctioncallback'. وهذا يسمح للمهاجمين غير المصادق عليهم بتنفيذ تعليمات برمجي...
CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...
CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...
WordPress Time Clock Pro plugin <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution vulnerability
Unauthenticated Limited Remote Code Execution vulnerability discovered by István Márton in WordPress Plugin Time Clock Pro versions = 1.1.4...
WordPress plugin Time Clock plugin and Time Clock Pro 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...
WordPress Time Clock Pro Plugin <= 1.1.4 is vulnerable to Remote Code Execution (RCE)
Software Time Clock Pro Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-9593 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 9837dd0a77ff Credits István Márton Required privilege...