Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.
References
| Link | Resource |
|---|---|
| https://code-white.com/blog/2015-05-cve-2015-2079-rce-usermin/ | Exploit |
| https://code-white.com/public-vulnerability-list/ | Third Party Advisory |
Configurations
History
14 May 2025, 18:59
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Webmin usermin
Webmin |
|
| CWE | CWE-94 | |
| References | () https://code-white.com/blog/2015-05-cve-2015-2079-rce-usermin/ - Exploit | |
| References | () https://code-white.com/public-vulnerability-list/ - Third Party Advisory | |
| CPE | cpe:2.3:a:webmin:usermin:*:*:*:*:*:*:*:* |
28 Apr 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-28 15:15
Updated : 2025-05-14 18:59
NVD link : CVE-2015-2079
Mitre link : CVE-2015-2079
JSON object : View
Products Affected
webmin
- usermin
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')