CVE-2020-11700

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07

Description An issue was discovered where improper sanitization of the parameter fname, used on the page "certs-x.php", would allow an attacker to retrieve the contents of arbitrary files, but the user has to be authenticated before interacting with this page.

Recommendations For SpamTitan version 7.07, consider restricting access to the "certs-x.php" page until a fix is available, and avoid using the parameter fname in this context to minimize the risk of exploitation.