CVE-2024-55971

SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server.

Score
CVSS 3.1 10.0 Critical
Status
Deferred - cve@mitre.org
Published
2025-01-23
Last modified
2025-02-06
Weaknesses
CWE-89

References