Inadequate Encryption in Elunez Eladmin DES Key Handler

CVE-2025-9239

What is CVE-2025-9239?

A vulnerability exists in Elunez Eladmin versions up to 2.7, specifically within the DES Key Handler's EncryptUtils function. An attacker can exploit this weakness by manipulating the STR_PARAM argument, particularly when using the input 'Passw0rd', leading to insufficient encryption strength. This security flaw allows for potential remote attacks, although the complexity of executing such exploits remains high, making successful attacks challenging.

References