VULNERABILITY INTELLIGENCE

CVE-2018-15576

CVSS score8.1 HIGH
EPSS probability9.68%
CISA KEVNot currently listed
Published2018-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.

Weakness classification

  • CWE-502: Deserialization of Untrusted Data

Primary references