WebTitan < 3.60 - Local File Inclusion

Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. dot dot in the fname parameter in a view action. id: CVE-2011-4640 info: name: WebTitan 3.60 - Local File Inclusion author: ctflearner severity:...

CVE-2014-4307

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter...

CVE-2014-4306

Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. dot dot in the logfile parameter in a download action...

EUVD-2019-8664

Malware in sbrugna...

EUVD-2019-8668

Malware in sbrugna...

EUVD-2019-8667

Malware in sbrugna...

EUVD-2014-4235

Malware in sbrugna...

EUVD-2019-8665

Malware in sbrugna...

EUVD-2014-4234

Malware in sbrugna...

EUVD-2011-4557

Malware in sbrugna...

EUVD-2019-8669

Malware in sbrugna...

EUVD-2011-4556

Malware in sbrugna...

EUVD-2017-9359

Malware in sbrugna...

EUVD-2019-8666

Malware in sbrugna...

EUVD-2019-8671

Malware in sbrugna...

EUVD-2019-8670

Malware in sbrugna...

CVE-2019-19017

An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system...

CVE-2019-19015

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service which is typically exposed to all users allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy without password authentication, an attacker is able to fully...

CVE-2019-19020

An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to ha...

CVE-2019-19018

An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfig.ini in the web administration interface, revealing what database the web application is using...