CVE-2011-5149

EPSS 1.9%

Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) testaddr or (2) testpass parameter to auth-settings.php; (3) hostname, (4) domainname, or (5) mailserver parameter to setup-relay.php; or (6) subnetmask or (7) defaultroute parameter to setup-network.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18261unverified exploitdbwww.exploit-db.com/exploits/18261unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/77987 http://osvdb.org/77988 http://osvdb.org/77989 http://secunia.com/advisories/47309 https://exchange.xforce.ibmcloud.com/vulnerabilities/71942 http://www.exploit-db.com/exploits/18261 http://www.vulnerability-lab.com/get_content.php?id=91