PT-2020-12857
CVE-2020-11804
·
تاريخ النشر
2020-09-17
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Titan SpamTitan version 7.07
Description
An issue was discovered due to improper sanitization of the parameter
quid, used in the page "mailqueue.php", which can lead to code injection. The input for this parameter is provided directly by an authenticated user via an HTTP GET request.Recommendations
For Titan SpamTitan version 7.07, consider restricting access to the "mailqueue.php" page until a fix is available, and avoid using the parameter
quid in this context to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾