Sophos Web Appliance Remote Command Injection Vulnerability

Sophos Web Appliance is a web security gateway solution. An input validation vulnerability in the MgrDiagnosticTools.php /controllers/MgrDiagnosticTools.php file in the web management interface of the Sophos Web Appliance could be exploited by an attacker to submit a special request for injection...

CVE-2016-9554

The Sophos Web Appliance Remote / Secure Web Gateway server version 4.2.1.3 is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php /controllers/MgrDiagnosticTools.php, in the component responsible for...