CVE-2018-10352: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formConfiguration class. Authentication is required to exploit this vulnerability...

PT-2018-9838

Name of the Vulnerable Software and Affected Versions: Trend Micro Email Encryption Gateway version 5.5 Description: A flaw in the formConfiguration class could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations. Authentication is required to exploit this issu...

Trend Micro Encryption for Email Gateway formConfiguration saveValue SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Encryption for Email Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within t...