Описание
An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 1.3.0 (включая)
cpe:2.3:a:hazzardweb:easylogin_pro:*:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.08152
Низкий
8.1 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 8.1
github
больше 3 лет назад
An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.
EPSS
Процентиль: 92%
0.08152
Низкий
8.1 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-502