| Package | Affected versions | Patched versions |
|---|---|---|
| usermin | = 0.4= 0.5= 0.6= 0.7= 0.8= 0.9= 0.91= 0.92= 0.93= 0.94= 0.95= 0.96= 0.97= 0.98= 0.99= 1.000= 1.010= 1.020= 1.030= 1.040= 1.051= 1.060= 1.070= 1.080= 1.090= 1.100= 1.110= 1.120= 1.130= 1.140= 1.150≤ 1.210 |
Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free