CVEs-PoC/2018/CVE-2018-6220.md

### [CVE-2018-6220](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6220)
![](https://img.shields.io/static/v1?label=Product&message=Trend%20Micro%20Email%20Encryption%20Gateway&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=OTHER%20-%20Arbitrary%20File%20Write&color=brighgreen)

### Description

An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.

### POC

#### Reference
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/

#### Github
- https://github.com/lean0x2F/lean0x2f.github.io