Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

F99942

#33598of 56,330
8.1Total CVSS
Vulnerabilities · 1
PT-2018-13100
8.1
2018-08-24
Unknown · Easylogin Pro · CVE-2018-15576
**Name of the Vulnerable Software and Affected Versions** EasyLogin Pro versions prior to 1.3.1 **Description** An issue was discovered in EasyLogin Pro where the Encryptor.php file contains an unserialize call that can be exploited for remote code execution in the decrypt function. This can happen if the attacker knows the key. **Recommendations** For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the decrypt function in Encryptor.php until a patch is available.