PT-2012-4423

CVE-2012-2998

·

Published

2012-09-28

·

Updated

2013-02-14

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager versions prior to 5.5.0.1823 Trend Micro Control Manager version 6.0 before 6.0.0.1449
Description A SQL injection issue exists in the ad hoc query module, allowing remote attackers to execute arbitrary SQL commands.
Recommendations For versions prior to 5.5.0.1823, update to version 5.5.0.1823 or later. For version 6.0 before 6.0.0.1449, update to version 6.0.0.1449 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2012-2998
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com