PT-2020-12786 · Titanhq · Spamtitan

Published 2020-09-17 · Updated 2021-07-21 · CVE-2020-11699

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07

Description An issue was discovered that allows an attacker to execute remote code on the target server due to improper validation of the fname parameter on the "certs-x.php" page. The attacker must be authenticated before interacting with this page.

Recommendations For SpamTitan version 7.07, ensure proper validation of the fname parameter on the "certs-x.php" page to prevent remote code execution. As a temporary workaround, consider restricting access to the "certs-x.php" page until a fix is available. Avoid using the fname parameter in the affected page until the issue is resolved.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-11699

Affected Products

Spamtitan

References · 8

• 🔥 http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/48817 · Exploit
• 🔥 https://sensepost.com/blog/2020/clash-of-the-spamtitan · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11699 · Security Note
• https://spamtitan.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11699 · Vendor Advisory
• https://twitter.com/felmoltor · Note
• https://github.com/felmoltor · Note