CVE-2016-8592

logquerysystem.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

CVE-2016-8592

Affected product: Trend Micro Threat Discovery Appliance (TDA) versions 2.6.1062r1 and earlier. Component exposed: log_query_system.cgi. Vulnerability: remote authenticated users can inject shell metacharacters via the cache_id parameter to execute arbitrary code with root privileges. This is a p...