CVE-2020-11803

HIGH 8.8CVE-2020-11803 · Published 17/09/2020 · updated 17/06/2026

In short

CVE-2020-11803 is a HIGH (CVSS 8.8) vulnerability affecting spamtitan (titanhq).
Chance of exploitation in the next 30 days (EPSS): 7.5%, higher than 94.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spamtitan titanhq	`= 7.07`	No fix yet

Description

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval() function. The user has to be authenticated on the web platform before interacting with the page.

References

packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html · Exploit
github.com/felmoltor · Third Party Advisory
sensepost.com/blog/2020/clash-of-the-spamtitan · Exploit
twitter.com/felmoltor · Third Party Advisory
spamtitan.com · Vendor Advisory

More vulnerabilities in spamtitan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

spamtitan

titanhq

= 7.07

No fix yet

Description

More vulnerabilities in spamtitan

See all →