cve-2023-1671

Сve-2023-1671 cve-2023-1671https://vulners.com/cve/CVE-2023-1671 はどのように機能しますか? /opt/ws/bin/ftsblistpack は Perl スクリプトで、別の Perl スクリプトである /opt/ws/bin/sblistpack を呼び出します。 その中のシェルコマンドの引数は一重引用符で囲まれています： root@kitploit: $rc += system"$sblistpack '$uri' '$user' '$filetype' '$filein' '$fileout'";...

Sophos Web Appliance UsrBlocked.php command injection

Added: 11/24/2023 CVE: CVE-2023-1671 Background Sophos Web Appliance is a web proxy providing HTTP security. Problem A vulnerability in UsrBlocked.php allows remote attackers to inject arbitrary commands into an HTTP request. Resolution Upgrade to Sophos Web Appliance 4.3.10.4 or higher. Referenc...

Sophos Web Appliance UsrBlocked.php command injection

Added: 11/24/2023 CVE: CVE-2023-1671 Background Sophos Web Appliance is a web proxy providing HTTP security. Problem A vulnerability in UsrBlocked.php allows remote attackers to inject arbitrary commands into an HTTP request. Resolution Upgrade to Sophos Web Appliance 4.3.10.4 or higher. Referenc...