WebTitan < 3.60 - Local File Inclusion

Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. dot dot in the fname parameter in a view action. id: CVE-2011-4640 info: name: WebTitan 3.60 - Local File Inclusion author: ctflearner severity:...

EUVD-2014-2987

Malware in sbrugna...

CVE-2020-11698

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server...

SpamTitan Arbitrary File Read Vulnerability

SpamTitan is an anti-spam solution from C/o Copperfasten, Ireland. The solution is characterized by easy installation and simple configuration. An arbitrary file read vulnerability exists in SpamTitan 7.07. The vulnerability stems from improper validation of the fname parameter in certs-x.php. An...

SpamTitan Command Injection Vulnerability

SpamTitan is an anti-spam solution from C/o Copperfasten, Ireland. The solution is characterized by easy installation and simple configuration. A command injection vulnerability exists in SpamTitan 7.07. The vulnerability stems from improper input validation of the community parameter in...

CVE-2020-11699

CVE-2020-11699 affects Titan SpamTitan 7.07. The issue is improper validation of the fname parameter on certs-x.php, enabling remote code execution on the target server when an authenticated user interacts with that page. Documented impact indicates attacker-controlled input could trigger code ex...

Cross site scripting

Cross-site scripting XSS vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter...

CVE-2014-2965

CVE-2014-2965 is a reflected XSS in SpamTitan’s management interface, affecting auth-settings-x.php prior to version 6.04. The vulnerability allows an attacker to inject arbitrary script via the sortdir parameter, executing in a user’s browser context. SpamTitan addressed this with a 6.04 patch; ...

Sql injection

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter...

CVE-2014-4306

CVE-2014-4306 affects WebTitan (logs-x.php) prior to 4.04, where a directory traversal via the logfile parameter in a download action allows remote attackers to read arbitrary files by using .. in the request. This is confirmed across multiple sources (Red Hat, NVD, OpenVAS reference), tying the ...

CVE-2014-4307

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter...

CVE-2014-4306

Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. dot dot in the logfile parameter in a download action...

CVE-2011-4638

Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to login-x.php, and allow remote authenticated users to execute arbitrary SQL commands via the 2 bldomain, 3 wldomain, or 4 temid paramete...

CVE-2011-4640

Summary (CVE-2011-4640): A local file inclusion in WebTitan/SpamTitan prior to version 3.60 via logs-x.php (fname parameter in the view action) allows remote authenticated users to read arbitrary files by crafting a dot-dot (“..”) path. The Nuclei template confirms the vulnerability class and aff...

动网(Dvbbs)filemange.asp任意上传漏洞

其实还是利用了 Microsoft IIS 解析文件名“x.asp;x.jpg/x.php;x.jpg”漏洞 参考 : 当上传图片为x.asp;x.jpg时，IIS会自动解析为asp格式， 所以我们只要上传后是x.asp;x.jpg这样的形式，就可以执行我们的马了，测试了下，x.php;x.jpg也是可以执行的。 Powered By Dvbbs Version 8.2.0 Powered By Dvbbs Version 8.1.0 Powered By Dvbbs Version 8.0.0 删除 filemange.asp...

Microsoft IIS 解析文件名“x.asp;x.jpg/x.php;x.jpg”漏洞

Microsoft IIS是一款微软开发的HTTP服务程序。 Microsoft IIS可以ASP或者任何其他可执行扩展执行任何扩展名文件，如"malicioius.asp;.jpg"就以ASP文件方式在服务器上执行，需要文件上传程序通过检查文件名的最后一段作为扩展名来保护系统。利用这个漏洞，攻击者可以绕过保护把危险的可执行文件上传到服务器上。 Microsoft IIS 7.5 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 5.1 Microsoft IIS 5.0 Microsoft IIS 4.0 Microsoft IIS 3...

CVE-2007-3963

Multiple cross-site scripting XSS vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 upgrade-0-2-3.php, 2 upgrade-0-3.php, or 3 upgrade-0-4.php in install/, a different vulnerability than...