Описание
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2020-11698
- https://github.com/felmoltor
- https://sensepost.com/blog/2020/clash-of-the-spamtitan
- https://twitter.com/felmoltor
- https://www.spamtitan.com
- http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.html
Связанные уязвимости
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php would allow a remote attacker to inject commands into the file snmpd.conf that would allow executing commands on the target server.