← back
CVE-2020-11698

CVE-2020-11698

EPSS 73.7%
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.htmlunverifiedexploitdbwww.exploit-db.com/exploits/48856unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.htmlhttps://github.com/felmoltorhttps://sensepost.com/blog/2020/clash-of-the-spamtitan/https://twitter.com/felmoltorhttps://www.spamtitan.com/