CVE-2011-5150

Name of the Vulnerable Software and Affected Versions SpamTitan versions 5.07 and earlier

Description The issue allows remote attackers or authenticated users to inject arbitrary web script or HTML. This can be achieved via the ipaddress or domain parameter to the "setup-network.php" endpoint.

Recommendations For SpamTitan versions 5.07 and earlier, consider restricting access to the "setup-network.php" endpoint until a fix is available. As a temporary workaround, avoid using the ipaddress and domain parameters in this endpoint to minimize the risk of exploitation.