CVE-2016-5840

hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.

• CWE-20

• http://esupport.trendmicro.com/solution/en-US/1114281.aspxVendor Advisory
• http://jvn.jp/en/jp/JVN55428526/index.html
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000103.html
• http://www.zerodayinitiative.com/advisories/ZDI-16-373
• https://www.exploit-db.com/exploits/40180/Exploit, Third Party Advisory
• http://esupport.trendmicro.com/solution/en-US/1114281.aspxVendor Advisory
• http://jvn.jp/en/jp/JVN55428526/index.html
• http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000103.html
• http://www.zerodayinitiative.com/advisories/ZDI-16-373
• https://www.exploit-db.com/exploits/40180/Exploit, Third Party Advisory

Published

Jun 30, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5834Cross-site scripting (XSS) vulnerability in the wp_get_attac…
• CVE-2016-5835WordPress before 4.5.3 allows remote attackers to obtain sen…
• CVE-2016-5836The oEmbed protocol implementation in WordPress before 4.5.3…
• CVE-2016-5837WordPress before 4.5.3 allows remote attackers to bypass int…
• CVE-2016-5838WordPress before 4.5.3 allows remote attackers to bypass int…
• CVE-2016-5839WordPress before 4.5.3 allows remote attackers to bypass the…
• CVE-2016-5841Integer overflow in MagickCore/profile.c in ImageMagick befo…
• CVE-2016-5842MagickCore/property.c in ImageMagick before 7.0.2-1 allows r…7.5
• CVE-2016-5843Multiple SQL injection vulnerabilities in the FAQ package 2.…
• CVE-2016-5844Integer overflow in the ISO parser in libarchive before 3.2.…
• CVE-2016-5845SAP SAPCAR does not check the return value of file operation…5.5
• CVE-2016-5847SAP SAPCAR allows local users to change the permissions of a…