{"uuid": "fd7d7b6e-9fdf-4f53-88f3-cb651300c3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-4983", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sophos_wpa_sblistpack_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Francisco Falcon\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability on Sophos Web Protection Appliance\\n          3.7.9, 3.8.0 and 3.8.1. The vulnerability exists on the sblistpack component, reachable\\n          from the web interface without authentication. This module has been tested successfully\\n          on Sophos Virtual Web Appliance 3.7.0.\", \"disclosure_date\": \"2013-09-06\", \"fullname\": \"exploit/linux/http/sophos_wpa_sblistpack_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Sophos Web Protection Appliance sblistpack Arbitrary Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/sophos_wpa_sblistpack_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/sophos_wpa_sblistpack_exec\", \"references\": [\"CVE-2013-4983\", \"OSVDB-97029\", \"BID-62263\", \"EDB-28175\", \"URL-http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Sophos Web Protection Appliance 3.7.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:56.175435Z"}