eFront 3.6.15 PHP Object Injection

eFront version 3.6.15 suffers from a PHP object injection vulnerability.