CVE-2014-2385

CVE-2014-2385 is a cross-site scripting vulnerability in the web UI of Sophos Anti-Virus for Linux (Configuration Console). The issue affects Sophos Anti-Virus 9.5.1 on Linux where several inputs in the web interface are not properly sanitized, enabling an attacker able to inject arbitrary HTML/J...

CVE-2014-2385 - Multiple Cross Site Scripting in Sophos Antivirus Configuration Console (Linux)

Vulnerability title: Multiple Cross Site Scripting in Sophos Antivirus Configuration Console Linux CVE: CVE-2014-2385 Vendor: Sophos Product: Antivirus Affected version: 9.5.1 Fixed version: 9.6.1 Reported by: Pablo Catalina Details: The Configuration Console of Sophos Antivirus 9.5.1 Linux does...