Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2015-2079

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.

Description

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Usermin Usermin

Default version status: unaffected

  • 0.980 to < 1.660affected

References