CVE-2011-4639

2022-10-0316:15:13

mitre

www.cve.org

cve-2011-4639

traceroute

ping

spamtitan webtitan

command execution

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.

References

www.sec-1.com/blog/?p=211