Beveiligingsadvies

CVE-2018-10350

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-05-25 15:00:00
Laatst bijgewerkt 2024-08-05 07:39:08
Toegewezen door trendmicro
CVSS-score geen score
Status PUBLISHED

Beschrijving

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability.