CVE-2016-6269

9.1CRITICAL

Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete ar

发布于: 1/30/2017更新于: 4/20/2025
在NVD查看在MITRE查看

描述

Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to (1) log_mgt_adhocquery_ajaxhandler.php, (2) log_mgt_ajaxhandler.php, (3) log_mgt_ajaxhandler.php or (4) tf parameter to wcs_bwlists_handler.php.

AI分析AI驱动

受影响产品

trendmicrosmart_protection_server
2.5
trendmicrosmart_protection_server
2.6
trendmicrosmart_protection_server
3.0

参考资料