CVE-2020-11699

HIGH

SpamTitan 7.07 - Authenticated Remote Code Execution via certs-x.php fname Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-11699.

AI-analyzed exploit summary This is a functional exploit for multiple authenticated RCE vulnerabilities in SpamTitan Gateway 7.07, including command injection via improper validation of the 'fname' parameter in certs-x.php and PHP code evaluation via the 'jaction' parameter in mailqueue.php. The exploit includes reverse shell functionality and arbitrary file read capabilities.

Description

An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this page.

Exploits (1)

exploitdb WORKING POC

pythonwebappsmultiple

https://www.exploit-db.com/exploits/48817

View Code ZIP pw:eip

This is a functional exploit for multiple authenticated RCE vulnerabilities in SpamTitan Gateway 7.07, including command injection via improper validation of the 'fname' parameter in certs-x.php and PHP code evaluation via the 'jaction' parameter in mailqueue.php. The exploit includes reverse shell functionality and arbitrary file read capabilities.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: SpamTitan Gateway 7.07

Auth required

Prerequisites: Authenticated access to the SpamTitan web interface · Network access to the target server

MITRE ATT&CK

T1059 - Command and Scripting Interpreter T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5

Core References

Vendor Advisory x_refsource_misc

https://www.spamtitan.com/

Third Party Advisory x_refsource_misc

https://github.com/felmoltor

Third Party Advisory x_refsource_misc

https://twitter.com/felmoltor

Exploit, Third Party Advisory x_refsource_misc

https://sensepost.com/blog/2020/clash-of-the-spamtitan/

Exploit, Third Party Advisory x_refsource_misc

http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html

Scores

CVSS v3 8.8

EPSS 0.0964

EPSS Percentile 94.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (1)

titanhq/spamtitan 7.07

Published Sep 17, 2020

Tracked Since Feb 18, 2026