PT-2012-2128 · Titanhq · Spamtitan

Publicado 2012-08-31 · Atualizado 2012-09-03 · CVE-2011-5150

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SpamTitan versions 5.07 and earlier

Description The issue allows remote attackers or authenticated users to inject arbitrary web script or HTML. This can be achieved via the ipaddress or domain parameter to the "setup-network.php" endpoint.

Recommendations For SpamTitan versions 5.07 and earlier, consider restricting access to the "setup-network.php" endpoint until a fix is available. As a temporary workaround, avoid using the ipaddress and domain parameters in this endpoint to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-5150

Produtos afetados

Spamtitan

Referências · 5

• 🔥 https://exploit-db.com/exploits/18261 · Exploit
• http://osvdb.org/77989 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-5150 · Nota de Segurança
• http://secunia.com/advisories/47309 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5150 · Nota