high8.8
CVE-2017-11388
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided string…
Impact
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Control Manager | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/100078
- http://www.securitytracker.com/id/1039049
- http://www.zerodayinitiative.com/advisories/ZDI-17-498
- http://www.zerodayinitiative.com/advisories/ZDI-17-499
- https://success.trendmicro.com/solution/1117722
- http://www.securityfocus.com/bid/100078
- http://www.securitytracker.com/id/1039049
- http://www.zerodayinitiative.com/advisories/ZDI-17-498
- http://www.zerodayinitiative.com/advisories/ZDI-17-499
- https://success.trendmicro.com/solution/1117722