Trend Micro Smart Protection Server Command Injection Vulnerability

Trend Micro Smart Protection Server is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-11395

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...

CVE-2017-11395

CVE-2017-11395 concerns Trend Micro Smart Protection Server (Standalone) 3.1/3.2. The vulnerability is a command-injection flaw in the Admin UI (cm_agent.php) where input from an authenticated session is used to construct and execute system commands, enabling code execution via POST data (notably...

Trend Micro Smart Protection OS Command Injection

1. Advisory Information Title: Trend Micro Smart Protection OS Command Injection Advisory ID: CORE-2017-0004 Advisory URL:http://www.coresecurity.com/core-labs/advisories/trend-micro-smart-protection-os-command-injection Date published: 2017-08-23 Date of last update: 2017-08-23 Vendors contacted...