CVE-2020-11804

Name of the Vulnerable Software and Affected Versions Titan SpamTitan version 7.07

Description An issue was discovered due to improper sanitization of the parameter quid, used in the page "mailqueue.php", which can lead to code injection. The input for this parameter is provided directly by an authenticated user via an HTTP GET request.

Recommendations For Titan SpamTitan version 7.07, consider restricting access to the "mailqueue.php" page until a fix is available, and avoid using the parameter quid in this context to minimize the risk of exploitation.