CVE-2012-2998

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.09% chance of exploitation in the next 30 days, 93th percentile

Published

2012-09-28

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21546

References

• CVE Record
• NVD entry

Related

• CVE-2012-2997
• CVE-2012-3001
• CVE-2012-2996
• CVE-2012-3137
• CVE-2012-2995
• CVE-2012-3152