Back to search
CVE-2017-11388
Published: Aug 2, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
100078
vdb-entry
x_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-17-499
x_refsource_MISC
1039049
vdb-entry
x_refsource_SECTRACK
https://success.trendmicro.com/solution/1117722
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-17-498
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now