Trend Micro Deep Discovery Inspector RCE Vulnerability

Trend Micro Deep Discovery Inspector is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-5840

Trend Micro Deep Discovery Inspector (DDI) is affected by a hotfix_upload.cgi vulnerability that lets remote attackers execute arbitrary code via crafted shell metacharacters in the Content-Disposition filename parameter. Affected products/versions include DDI 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3....

CVE-2016-5840

hotfixupload.cgi in Trend Micro Deep Discovery Inspector DDI 3.7, 3.8 SP1 3.81, and 3.8 SP2 3.82 allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header...