CVE-2012-2998 SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via u...
HighCVSS 7.5
EPSS 6.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro control manager | <= 5.5 | No fix listed |
| trend micro control manager | = 2.0 | No fix listed |
| trend micro control manager | = 2.1 | No fix listed |
| trend micro control manager | = 2.5 | No fix listed |
| trend micro control manager | = 3.0 | No fix listed |
| trend micro control manager | = 3.5 | No fix listed |
| trend micro control manager | = 5.0 | No fix listed |
| trend micro control manager | = 5.5 | No fix listed |
| trend micro control manager | = 6.0 | No fix listed |
References
- esupport.trendmicro.com vendor-advisory
- JVN#42014489 patch third-party-advisory
- JVNDB-2012-000090 patch third-party-advisory
- VU#950795 third-party-advisory us-government-resource
- 1027584 vdb-entry
- www.spentera.com patch
- www.trendmicro.com patch
- www.trendmicro.com patch