CVE-2015-2079

critical · 9.9

Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.

9.9

CVSS

1.5%

EPSS (exploit prob.)

73rd

EPSS percentile

2025-04-28

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-96CWE-94

Affected products

Vendor	Product	Affected versions
webmin	usermin	>= 0.980, < 1.660

Check a specific version with /api/v1/cve/match.

References

https://code-white.com/blog/2015-05-cve-2015-2079-rce-usermin/
https://code-white.com/public-vulnerability-list/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-2079