CVE-2020-11698

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/felmoltorThird Party Advisory
https://sensepost.com/blog/2020/clash-of-the-spamtitan/Exploit, Third Party Advisory
https://twitter.com/felmoltorThird Party Advisory
https://www.spamtitan.com/Vendor Advisory
http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
https://github.com/felmoltorThird Party Advisory
https://sensepost.com/blog/2020/clash-of-the-spamtitan/Exploit, Third Party Advisory
https://twitter.com/felmoltorThird Party Advisory
https://www.spamtitan.com/Vendor Advisory

Timeline

Published: Sep 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-116998.8An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker CVE-2020-11707.8An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the vulnerabi CVE-2020-117006.5An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an CVE-2020-117018.8An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting fi CVE-2020-117026.1An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. CVE-2020-117037.5An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the l CVE-2020-117046.1An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInh CVE-2020-117059.8An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certi CVE-2020-117068.8An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any usern CVE-2020-117078.8An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As CVE-2020-117089.8An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages par CVE-2020-117097.5cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilit