CVE-2017-11386

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549...

CVE-2017-11386

Trend Micro Control Manager 6.0 is affected by a SQL injection in the component cmdHandlerNewReportScheduler.dll when processing opcode 0x4707, caused by lack of proper input validation. This vulnerability can lead to Remote Code Execution and is documented as CVE-2017-11386 (ZDI-17-496). Public ...