CVE-2016-6269

Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to (1) log_mgt_adhocquery_ajaxhandler.php, (2) log_mgt_ajaxhandler.php, (3) log_mgt_ajaxhandler.php or (4) tf parameter to wcs_bwlists_handler.php.

• CWE-22

• https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/Exploit, Technical Description, Third Party Advisory
• https://success.trendmicro.com/solution/1114913Mitigation, Patch, Vendor Advisory
• https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/Exploit, Technical Description, Third Party Advisory
• https://success.trendmicro.com/solution/1114913Mitigation, Patch, Vendor Advisory

Published

Jan 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6263The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in…
• CVE-2016-6264Integer signedness error in libc/string/arm/memset.S in uCli…7.5
• CVE-2016-6265Use-after-free vulnerability in the pdf_load_xref function i…
• CVE-2016-6266ccca_ajaxhandler.php in Trend Micro Smart Protection Server …8.8
• CVE-2016-6267SnmpUtils in Trend Micro Smart Protection Server 2.5 before …8.8
• CVE-2016-6268Trend Micro Smart Protection Server 2.5 before build 2200, 2…7.8
• CVE-2016-6270The handle_certificate function in /vmi/manager/engine/manag…8.8
• CVE-2016-6271The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows m…
• CVE-2016-6272XPath injection vulnerability in Epic MyChart allows remote …
• CVE-2016-6273The lmadmin component in Flexera FlexNet Publisher (aka Flex…
• CVE-2016-6276Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux…
• CVE-2016-6277NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Bet…8.8