A remote code execution vulnerability exists in CryptoLog (PHP version, discontinued since 2009) due to a chained exploitation of SQL injection and command injection vulnerabilities.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.09492·Published 2025-07-10·Fixed in ASP.NET rewrite (2009)CWE-20
