An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval() function. The user has to be authenticated on the web platform before interacting with the page.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-09-17T16:24:01

Updated: 2024-08-04T11:41:59.915Z

Reserved: 2020-04-15T00:00:00

Link: CVE-2020-11803

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-09-17T17:15:15.193

Modified: 2024-11-21T04:58:39.380

Link: CVE-2020-11803

cve-icon Redhat

No data.