CVE-2017-11386

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549...

CVE-2017-11386: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549...

PT-2017-11972

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager version 6.0 Description The issue is related to a SQL injection that causes remote code execution due to a lack of proper user input validation in the cmdHandlerNewReportScheduler.dll module. This occurs when...