Vulnerabilities > Trend Micro > Deep Discovery Inspector > 3.82

DATE CVE VULNERABILITY TITLE RISK
2016-06-30 CVE-2016-5840 Improper Input Validation vulnerability in Trend Micro Deep Discovery Inspector 3.7/3.81/3.82
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.
network
low complexity
trend-micro CWE-20
critical
9.0