Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

F99942

#31490de 53,638
8.1CVSS total
Vulnerabilidades · 1
PT-2018-13100
8.1
2018-08-24
Unknown · Easylogin Pro · CVE-2018-15576
**Name of the Vulnerable Software and Affected Versions** EasyLogin Pro versions prior to 1.3.1 **Description** An issue was discovered in EasyLogin Pro where the Encryptor.php file contains an unserialize call that can be exploited for remote code execution in the decrypt function. This can happen if the attacker knows the key. **Recommendations** For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the decrypt function in Encryptor.php until a patch is available.