Description
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.spamtitan.com/ ↗
- https://github.com/felmoltor ↗
- https://twitter.com/felmoltor ↗
- https://sensepost.com/blog/2020/clash-of-the-spamtitan/ ↗
- http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.html ↗
- http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.html ↗