A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view