CVE-2006-4246

Published: Sep 19, 2006Modified: Apr 16, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.

Affected (32)

Products: Usermin: Usermin

Usermin

1 product

Usermin

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Usermin Usermin	Up to 1.210
Usermin Usermin	Version 0.4
Usermin Usermin	Version 0.5
Usermin Usermin	Version 0.6
Usermin Usermin	Version 0.7
Usermin Usermin	Version 0.8
Usermin Usermin	Version 0.91
Usermin Usermin	Version 0.92
Usermin Usermin	Version 0.93
Usermin Usermin	Version 0.94
Usermin Usermin	Version 0.95
Usermin Usermin	Version 0.96
Usermin Usermin	Version 0.97
Usermin Usermin	Version 0.98
Usermin Usermin	Version 0.99
Usermin Usermin	Version 0.9
Usermin Usermin	Version 1.000
Usermin Usermin	Version 1.010
Usermin Usermin	Version 1.020
Usermin Usermin	Version 1.030
Usermin Usermin	Version 1.040
Usermin Usermin	Version 1.051
Usermin Usermin	Version 1.060
Usermin Usermin	Version 1.070
Usermin Usermin	Version 1.080
Usermin Usermin	Version 1.090
Usermin Usermin	Version 1.100
Usermin Usermin	Version 1.110
Usermin Usermin	Version 1.120
Usermin Usermin	Version 1.130
Usermin Usermin	Version 1.140
Usermin Usermin	Version 1.150