Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Apr 29, 2026

CVE-2011-4639

Description

The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.

Affected products

Spamtitan/Webtitan
cpe:2.3:a:spamtitan:webtitan:*:*:*:*:*:*:*:*
Range: <=3.50

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.sec-1.com/blog/nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000