Sophos Web Protection Appliance Patience.cgi Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Sophos Web Protection Appliance patience.cgi Directory Traversal', 'Description' = %q This module abuses a directory traversal in...

CVE-2013-2641: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter...

PT-2014-2605

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.8.2 Description The issue allows remote attackers to read arbitrary files. This is achieved via the id parameter in the patience.cgi component. Recommendations For versions prior to 3.7.8.2, update to...

Sophos Web Protection Appliance patience.cgi 'id' Parameter Directory Traversal

The Sophos Web Protection application running on the remote host is affected by a directory traversal vulnerability in the patience.cgi script due to improper sanitization of user-supplied input passed to the 'id' parameter. An unauthenticated, remote attacker can exploit this to retrieve arbitra...