Full title: Sophos Web Protection Appliance 3.7.8.1 XSS / Command Execution 
Category: web applications
Platform: php
Sophos Web Protection Appliance version 3.7.8.1 suffers from OS command injection, cross site scripting, and file disclosure vulnerabilities.

# 0day.today @ http://0day.today/