CVE-2020-11803: Improper Control of Generation of Code

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval function. The user has to be authenticated...

PT-2020-12856

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07 Description An issue was discovered where improper sanitization of the jaction parameter when interacting with the "mailqueue.php" page could lead to server-side PHP code evaluation. This occurs because user-provided inp...