CVE-2018-15576

An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.

CVSS v3.0

8.1 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

9.68% chance of exploitation in the next 30 days, 95th percentile

Published

2018-08-24

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/149018/Easylogin-Pro-1.3.0-Remote-Code-Execution.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/45227

References

• CVE Record
• NVD entry

Related

• CVE-2018-15571
• CVE-2018-15587
• CVE-2018-15565
• CVE-2018-15591
• CVE-2018-15562
• CVE-2018-15596