Trend Micro Control Manager AdHocQuery_Processor.aspx SQL Injection

A SQL injection vulnerability has been reported in Trend Micro Control Manager. The vulnerability is due to lack of validation on two parameters in the AdHocQueryProcessor.aspx script. A remote, authenticated attacker could exploit this vulnerability by sending a malicious HTTP request to the...

Trend Micro Control Manager AdHocQuery_Processor.aspx id Parameter SQL Injection

Trend Micro Control Manager, a centralized threat and data protection management application, is installed on the remote Windows host and is potentially affected by a SQL injection vulnerability because the application fails to properly sanitize user-supplied input to the 'id' parameter of the...