VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Jun 16, 2026

CVE-2011-4639

CVE-2011-4639

Description

The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.

Affected products

2
  • Spamtitan/Webtitan2 versions
    cpe:2.3:a:spamtitan:webtitan:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:spamtitan:webtitan:*:*:*:*:*:*:*:*range: <=3.50
    • (no CPE)range: <3.60

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.