CVE-2006-1279: Sherzod Ruzmetov Cgi Session

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite.

Affected products

• Sherzod Ruzmetov Cgi Session: up to and including 4.03

Published 2006-03-19. Last modified 2026-06-16.