CVE-2020-11699

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07

Description An issue was discovered that allows an attacker to execute remote code on the target server due to improper validation of the fname parameter on the "certs-x.php" page. The attacker must be authenticated before interacting with this page.

Recommendations For SpamTitan version 7.07, ensure proper validation of the fname parameter on the "certs-x.php" page to prevent remote code execution. As a temporary workaround, consider restricting access to the "certs-x.php" page until a fix is available. Avoid using the fname parameter in the affected page until the issue is resolved.