CVE-2011-4639: Spamtitan Webtitan

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.

Affected products

• Spamtitan Webtitan: up to and including 3.50

Published 2012-10-08. Last modified 2026-06-16.