SpamTitan Arbitrary File Read Vulnerability

SpamTitan is an anti-spam solution from C/o Copperfasten, Ireland. The solution is characterized by easy installation and simple configuration. An arbitrary file read vulnerability exists in SpamTitan 7.07. The vulnerability stems from improper validation of the fname parameter in certs-x.php. An...

CVE-2020-11699

CVE-2020-11699 affects Titan SpamTitan 7.07. The issue is improper validation of the fname parameter on certs-x.php, enabling remote code execution on the target server when an authenticated user interacts with that page. Documented impact indicates attacker-controlled input could trigger code ex...

CVE-2020-11700: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retrieve the contents of arbitrary files. The user has to be authenticated before interacting with this page...

PT-2020-12786

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07 Description An issue was discovered that allows an attacker to execute remote code on the target server due to improper validation of the fname parameter on the "certs-x.php" page. The attacker must be authenticated befo...

CVE-2020-11699: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this page...

PT-2020-12787

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07 Description An issue was discovered where improper sanitization of the parameter fname, used on the page "certs-x.php", would allow an attacker to retrieve the contents of arbitrary files, but the user has to be...