Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sophos Web Appliance 命令注入漏洞
Vulnerability Description
Sophos Web Appliance（SWA）是英国Sophos公司的一套Web安全网关产品。该产品支持实时网络威胁防护、自定义Web过滤和动态控制应用程序等。 SWA 4.3.1.2之前的版本中的用于报告生成的interface存在远程命令注入漏洞。远程攻击者可借助‘token’参数利用该漏洞注入命令。
CVSS Information
N/A
Vulnerability Type
N/A