CVE-2015-5997

Impero Education Pro prior to 5105 is affected by CVE-2015-5997 due to a hard-coded CBC key and an IV derived from the hash of the string Imp3ro. This weak cryptographic setup enables an attacker who can sniff encrypted network traffic to recover plaintext data. The vulnerability affects the encr...

CVE-2015-5998

Impero Education Pro before version 5105 is affected by CVE-2015-5998 due to an authentication weakness that relies on the hardcoded authentication string -1|AUTHENTICATE\x02PASSWORD. This vulnerability allows a remote attacker to execute arbitrary commands on the affected host after bypassing au...