CVE-2015-2079: Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form…

PriorityP356high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

1.00%

58.6th percentile

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
usermin	usermin	>= 0.980 < 1.660	1.660
webmin	usermin	>= 0.980 < 1.660	1.660

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.