high8.1Public exploit code
CVE-2018-15576
An issue was discovered in EasyLogin Pro through 1.3.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easylogin Pro 1.3.0 - 'Encryptor.php' Unserialize Remote Code Execution2018-08-20 · remote · php · Verified
Impact
An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hazzardweb | Easylogin Pro | through 1.3.0 |