Security Advisory

CVE-2020-11804

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-17 16:26:45

Last updated 2024-08-04 11:42:00

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur. The input for this parameter is provided directly by an authenticated user via an HTTP GET request.

← Browse all CVEs View on cve.org ↗