The vulnerability of the policy.jsp script in the Email Encryption Gateway allows a hacker to execute arbitrary SQL queries.

The vulnerability of the policy.jsp script in the Email Encryption Gateway system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the hidEditld parameter...

PT-2018-1142

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description A SQL injection issue in the policy script of the Email Encryption Gateway could allow an attacker to execute arbitrary SQL commands, potentially uploading and executing malicious co...