Full title: Sophos Web Protection Appliance Command Injection Vulnerability Category: web applications Platform: php Core Security Technologies Advisory - Sophos Web Protection Appliance versions 3.7.9 and earlier, 3.8.1, and 3.8.0 suffer from multiple OS command injection vulnerabilities. # 0day.today @ http://0day.today/