A vulnerability, which was classified as very critical, has been found in Usermin up to 1.659. Affected by this issue is the function
sig_file_free of the file uconfig_save.cgi. The manipulation leads to improper neutralization of directives in statically saved code (‘static code injection’).
This vulnerability is handled as CVE-2015-2079. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
