CWE Code: 74
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary: in titanhq spamtitan through 7.03, a vulnerability exists in the spam rule update function. updates are downloaded over http, including scripts which are subsequently executed with root permissions. an attacker with a privileged network position is trivially able to inject arbitrary commands.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-06-05
Last Modified Date: 2019-06-06