📄 Sophos Web Virtual Appliance 3.7.0 Directory Traversal

Proof of concept exploit for an older vulnerability from 2013 where Sophos Web Virtual Appliance version 3.7.0 suffered from a directory traversal vulnerability...

EUVD-2017-18454

Malware in sbrugna...

EUVD-2017-15469

Malware in sbrugna...

EUVD-2016-10360

Malware in sbrugna...

EUVD-2013-2582

Malware in sbrugna...

EUVD-2017-15248

Malware in sbrugna...

EUVD-2017-15249

Malware in sbrugna...

EUVD-2016-10359

Malware in sbrugna...

EUVD-2013-4828

Malware in sbrugna...

EUVD-2020-24134

Malware in sbrugna...

EUVD-2023-37499

Malicious code in bioql PyPI...

EUVD-2022-52188

Malicious code in bioql PyPI...

CVE-2023-33336

Reflected cross site scripting XSS vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes...

CVE-2023-1671

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code...

CVE-2020-36692

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA...

CVE-2014-2849

The Change Password dialog box changepassword in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request...

CVE-2013-4984

The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...

CVE-2014-2850

The network interface configuration page netinterface in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter...

CVE-2013-4983

The getreferers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php...

CVE-2022-4934

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...