CVE-2017-11393: Improper Input Validation

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG 12 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543...

PT-2017-2557

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11 and 12 Description The issue is related to a proxy command injection vulnerability that allows remote attackers to execute arbitrary code on vulnerable installations. This can be exploited by parsing the tr...

Sql injection

Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to 1 costview2/jobs.php or 2 costview2/printers.php...

CVE-2014-2934: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to 1 costview2/jobs.php or 2 costview2/printers.php...

PT-2014-4964

Name of the Vulnerable Software and Affected Versions Caldera version 9.20 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the tr parameter to specific API endpoints, such as "costview2/jobs.php" or "costview2/printers.php". Recommendation...

CVE-2013-6397

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...

CVE-2013-6397: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...