PT-2020-12787 · Titanhq · Spamtitan

Published 2020-09-17 · Updated 2021-07-21 · CVE-2020-11700

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07

Description An issue was discovered where improper sanitization of the parameter fname, used on the page "certs-x.php", would allow an attacker to retrieve the contents of arbitrary files, but the user has to be authenticated before interacting with this page.

Recommendations For SpamTitan version 7.07, consider restricting access to the "certs-x.php" page until a fix is available, and avoid using the parameter fname in this context to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-11700

Affected Products

Spamtitan

References · 8

• 🔥 http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/48817 · Exploit
• 🔥 https://sensepost.com/blog/2020/clash-of-the-spamtitan · Exploit
• https://osv.dev/vulnerability/CVE-2020-11700 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11700 · Security Note
• https://spamtitan.com · Vendor Advisory
• https://twitter.com/felmoltor · Note
• https://github.com/felmoltor · Note