The vulnerability of the editPolicy.jsp script in the Email Encryption Gateway system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the editPolicy.jsp script in the Email Encryption Gateway system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the hidRuleld parameter...

PT-2018-1141

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description A SQL injection issue in the edit policy script of the Trend Micro Email Encryption Gateway could allow an attacker to execute SQL commands, potentially leading to the upload and...