CVE-2019-18189: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan 11.0, XG and Worry-Free Business Security 9.5, 10.0 may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication...

CVE-2019-9489

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan versions XG and 11.0, and Worry-Free Business Security versions 10.0, 9.5 and 9.0 could allow an attacker to modify arbitrary files on the affected product's management console...

Directory traversal

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan versions XG and 11.0, and Worry-Free Business Security versions 10.0, 9.5 and 9.0 could allow an attacker to modify arbitrary files on the affected product's management console...

CVE-2019-9489

A directory traversal vulnerability exists in Trend Micro Apex One , OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5, and 9.0). This flaw allows an unauthenticated, remote attacker to send a URI containing directory traversal characters to disclose the cont...

CVE-2019-9489: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan versions XG and 11.0, and Worry-Free Business Security versions 10.0, 9.5 and 9.0 could allow an attacker to modify arbitrary files on the affected product's management console...

PT-2019-19681

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan versions XG and 11.0 Trend Micro Worry-Free Business Security versions 10.0, 9.5, and 9.0 Description A directory traversal issue could allow an attacker to modify...

Stored Cross-Site Scripting Vulnerability in School Worry-Free Online Exam System

Schoolless Online Exam System is an online exam system platform. A stored cross-site scripting vulnerability exists in School Worry Free Online Exam System. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

JVN#28865183: Insecure DLL Loading issue in multiple Trend Micro products

Multiple products provided by Trend Micro Incorporated contain an insecure DLL loading issue CWE-427. When invoking the installers of other applications while the concerned products are installed to the PC, the DLL placed in the same directory as the the installers of the other applications may b...

Worry-Free Shopping System ASP General Edition suffers from SQ Injection Vulnerability

Hassle-free shopping system ASP General Edition is a shopping site based on ASP/Access development of general management system set up. Worry-Free Shopping System ASP General Edition suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

SQL Injection Vulnerability in School Worry-free Personnel Payroll System v2.5

The School Worry-Free Personnel Payroll System is a general-purpose dynamic personnel payroll management software. A SQL injection vulnerability exists in School Worry-Free Personnel Payroll System v2.5, which can be exploited by an attacker to access or modify database data due to insufficient...

Worry-Free Electricity Android APP has Arbitrary Account Password Reset Vulnerability

Electricity Worry-free APP is a cross electrical equipment professional service platform. Electricity Worry-free Android APP has an arbitrary account password reset vulnerability. The vulnerability allows attackers to use the vulnerability to change the password of the other party's cell phone...

Denial of Service Vulnerability in Electricity Free Android App

Electricity Worry-free APP is a cross electrical equipment professional service platform. A denial of service vulnerability exists in the Electricity Worry Free Android APP. It allows an attacker to traverse a cell phone number and send unlimited CAPTCHAs to the cell phone, consuming server...

Trend Micro Worry-Free Business Security (WFBS) Detection (Windows SMB Login)

SMB login-based detection of Trend Micro Worry-Free Business Security WFBS. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in Generalized Website Building System of School Worry-free Software Technology Co.

Schoolfree Software Technology is an educational software teaching application research and system development company. A SQL injection vulnerability exists in the generic website builder system of School Worry Free Software Technology Ltd. The vulnerability allows attackers to utilize commonly...

CVE-2016-1224

CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting XSS attacks via unspecified vectors...

CVE-2016-1224

CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting XSS attacks via unspecified vectors...

CVE-2016-1223

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-1223

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors...

Crlf injection

CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting XSS attacks via unspecified vectors...