CVE-2018-10350

Summary: CVE-2018-10350 concerns a SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x. The flaw arises from improper handling of parameters passed to wcs_bwlists_handler.php, allowing an attacker to craft input that is used to form SQL querie...