CVE-2020-11804

概要

参考情報

• packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html · Exploit
• github.com/felmoltor · Third Party Advisory
• sensepost.com/blog/2020/clash-of-the-spamtitan · Exploit
• twitter.com/felmoltor · Third Party Advisory
• spamtitan.com · Vendor Advisory

spamtitan のその他の脆弱性

• CVE-2020-35658中 5.3SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.
• CVE-2020-24046高 7.2A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution …
• CVE-2020-24045高 7.2A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution …
• CVE-2020-11803高 8.8An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php…
• CVE-2020-11700中 6.5An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an …