EDB-21546

functional

Trend Micro Control Manager 5.5/6.0 AdHocQuery - (Authenticated) Blind SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor otoypublished 2012-09-27catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-2998US	high7.5	6.09% (93rd)	Exploit	2012-09-28
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrar…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.