CVE-2024-9593

CVE-2024-9593 Time Clock = 1.2.2 & Time Clock Pro = 1.1.4 - 未認証（限定）リモートコード実行 説明: WordPress用Time ClockプラグインおよびTime Clock Proプラグインは、'etimeclockwploadfunctioncallback'関数を介して、バージョン（Time Clockは1.2.2まで、Time Clock...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit WordPress 用 Time Clock プラグインおよび Time Clock Pro プラグインは、'etimeclockwploadfunctioncallback' 関数を介して、Time Clock では 1.2.2 まで、Time Clock Pro では 1.1.4 までのバージョンにおいて、リモートコード実行（Remote Code Execution）の脆弱性の影響を受けます。これにより、認証されていない攻撃者がサーバー上でコードを実行できる可能性があります。呼び出される関数のパラメータは指定できません。 使用方法:...

CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

WordPress Time Clock Pro plugin <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution vulnerability

Unauthenticated Limited Remote Code Execution vulnerability discovered by István Márton in WordPress Plugin Time Clock Pro versions = 1.1.4...

WordPress plugin Time Clock plugin and Time Clock Pro 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...

WordPress Time Clock Pro Plugin <= 1.1.4 is vulnerable to Remote Code Execution (RCE)

Software Time Clock Pro Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-9593 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 9837dd0a77ff Credits István Márton Required privilege...