| Package | Affected versions | Patched versions |
|---|---|---|
| usermin | ≥ 0.980, < 1.660 | 1.660 |
Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free