CVE-2017-11383

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560...

PT-2017-11969

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager version 6.0 Description The issue is related to a SQL injection that causes remote code execution due to inadequate user input validation in the cmdHandlerTVCSCommander.dll module. This occurs when executing a...

CVE-2017-11383: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560...