Trend Micro Control Manager cmdHandlerTVCSCommander SQL Injection (CVE-2017-11383)

An SQL injection vulnerability exists in Trend Micro Control Manager. The vulnerability is due to improper validation of the user supplied input for cmdHandlerTVCSCommander.dll. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server.

from Check Point Update Services Advisories http://ift.tt/2xDTqHK

No comments:

Post a Comment

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...