CVE-2018-10350

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary…

published May 25, 2018

CVSS

—

EPSS

14%

Percentile

96.6

In the wild

Unconfirmed

What it is

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14166 · 96.6th percentile
Published: 2018-05-25T15:00Z

EPSS history

Timeline

25 MAY 15:00Z
A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary…
cvelistv5