CVE-2020-11803
HIGHSpamTitan 7.07 - Authenticated Remote Code Execution via mailqueue.php jaction Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-11803.
AI-analyzed exploit summary This Python script demonstrates multiple authenticated remote code execution (RCE) vulnerabilities in SpamTitan Gateway 7.07, including improper input validation and PHP eval abuse. It includes functional exploit code for CVE-2020-11699, CVE-2020-11700, CVE-2020-11803, and CVE-2020-11804.
Description
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval() function. The user has to be authenticated on the web platform before interacting with the page.
Exploits (1)
This Python script demonstrates multiple authenticated remote code execution (RCE) vulnerabilities in SpamTitan Gateway 7.07, including improper input validation and PHP eval abuse. It includes functional exploit code for CVE-2020-11699, CVE-2020-11700, CVE-2020-11803, and CVE-2020-11804.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H