Signature Detail

HTTP: Trend Micro Control Manager CasLogDirectInsertHandler.cs Cross Site Request Forgery

This signature detects attempts to exploit a known vulnerability in Trend Micro Control Manager. An attacker craft a url that when followed by a user can insert arbitrary records into the database, including user accounts and administrator privileges. A remote attacker can exploit this vulnerability by enticing a user to follow crafted URI, upon successful exploitation the attacker can login to the administrator console with the created account and execute commands with the privileges of the affected service.