IQID:17217 HTTP Trend Micro Control Manager - ImportFile Directory Traversal RCE (Metasploit) S

IQID: 17217 - May 2018

This module exploits a directory traversal vulnerability found in Trend Micro Control Manager. The vulnerability is triggered when sending a specially crafted fileName (containing ../'s) parameter to the importFile.php script. This will allow for writing outside of the ImportPolicy directory.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.