Multiple SQL Injection Vulnerabilities in Trend Micro Control Manager

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple SQL injection vulnerabilities that stem from a failure to adequately validate SQL queries before utilizing user dat...

Trend Micro Control Manager Authentication Bypass Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An authentication bypass vulnerability exists in Trend Micro Control Manager. An attacker could use this vulnerability to bypass the authentication mechanism and...

Trend Micro Control Manager cgiShowClientAdm Security Bypass

The version of Trend Micro Control Manager running on the remote host is affected by a security bypass vulnerability when processing calls to the cgiShowClientAdm web function due to a failure to provide authentication for the functionality that exposes, modifies, or deletes DLP templates involve...

Trend Micro Control Manager File Upload

File upload vulnerability in Trend Micro Control Manager importFile.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager File Disclosure

File disclosure vulnerability in Trend Micro Control Manager download.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Trend Micro Control Manager cgiShowClientAdm Missing Authentication for Critical Function Vulnerability

This vulnerability allows remote attackers to modify the security posture of the underlying product on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the...

Trend Micro Control Manager Widget importFile.php Directory Traversal

A directory traversal vulnerability has been reported in Trend Micro Control Manager. This vulnerability is caused by improper sanitization of directory traversal characters by importFile php. A remote, unauthenticated attacker could exploit this vulnerability by uploading arbitrary files onto th...

Trend Micro Control Manager download.php Information Disclosure

An information disclosure vulnerability exists in Trend Micro Control Manager. The vulnerability is due to security misconfiguration which allows access to the unreferenced download.php file, which in turn allow reading of the arbitrary files...

Trend Micro Control Manager importFile.php Directory Traversal

A directory traversal vulnerability has been reported in Trend Micro Control Manager. This vulnerability is caused by improper sanitization of directory traversal characters.. by importFile.php. A remote attacker could exploit this vulnerability by uploading arbitrary files onto the vulnerable...

Trend Micro Control Manager Detection (uncredentialed)

Binary data trendmicrocontrolmanagerdetectunauth.nbin...

Trend Micro Control Manager download.php File Disclosure

The version of Trend Micro Control Manager running on the remote host is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the download.php script. An unauthenticated, remote attacker can exploit this, via a crafted request employing director...

Multiple Directory Traversal Vulnerability in Trend Micro Control Manager

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple directory traversal vulnerabilities that stem from failure to adequately validate user input. The vulnerabilities c...

Multiple SQL Injection Vulnerabilities in Trend Micro Control Manager (CNVD-2017-01598)

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. Trend Micro Control Manager suffers from multiple SQL injection vulnerabilities that stem from a failure to adequately validate SQL queries before using user input. ...

Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetold's dlppolicy.php script. The issue lies in the lack of proper...

Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetoldSP1's dlppolicy.php script. The issue lies in the lack of proper...

Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetoldSP1's modDLPViolationCntdrildown.php script. The issue lies in th...

Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's importFile.php script. The issue lies in the lack of proper...

Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetsnew's download.php script. The issue lies in the lack of...

Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's dlppolicy.php script. The issue lies in the lack of proper...

Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widget's download.php script. The issue lies in the lack of proper...