CVE-2020-35658

< 7.09

SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.

5.3MEDIUM

CVE-2020-24046

all versions

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing

7.2HIGH

CVE-2020-24045

all versions

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing

7.2HIGH

CVE-2020-11804

all versions

An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.ph

8.8HIGH

CVE-2020-11803

all versions

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mai

8.8HIGH

CVE-2020-11700

all versions

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would

6.5MEDIUM

CVE-2020-11699

all versions

An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an

8.8HIGH

CVE-2020-11698

all versions

An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snmp-x.php wou

9.8CRITICAL

CVE-2019-6800

>= 7.00 and <= 7.03

In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, incl

7.5HIGH

CVE-2018-15136

< 7.01

TitanHQ SpamTitan before 7.01 has Improper input validation. This allows internal attackers to bypass the anti-spam filter to send

5.3MEDIUM

CVE-2014-2965

<= 6.03

Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitra

CVE-2011-4640

<= 3.50

Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitr

CVE-2011-4639

<= 3.50

The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to

CVE-2011-4638

<= 3.50

Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands

CVE-2011-5150

<= 5.07

Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated

CVE-2011-5149

<= 5.08

Multiple cross-site scripting (XSS) vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web s