SpamTitan Arbitrary File Read Vulnerability

SpamTitan is an anti-spam solution from C/o Copperfasten, Ireland. The solution is characterized by easy installation and simple configuration. An arbitrary file read vulnerability exists in SpamTitan 7.07. The vulnerability stems from improper validation of the fname parameter in certs-x.php. An...

CVE-2020-11699

CVE-2020-11699 affects Titan SpamTitan 7.07. The issue is improper validation of the fname parameter on certs-x.php, enabling remote code execution on the target server when an authenticated user interacts with that page. Documented impact indicates attacker-controlled input could trigger code ex...

CVE-2020-11699: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this page...

CVE-2020-11700: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retrieve the contents of arbitrary files. The user has to be authenticated before interacting with this page...