CVE-2013-4983

This Metasploit module exploits a command injection vulnerability in Sophos Web Protection Appliance versions 3.7.9, 3.8.0, and 3.8.1 via the sblistpack component, allowing arbitrary command execution without authentication.

The exploit demonstrates a pre-authentication OS command injection vulnerability in Sophos Web Protection Appliance, allowing unauthenticated remote attackers to execute arbitrary commands via crafted POST parameters. The provided Python script triggers a reverse shell by injecting a malicious payload into the 'domain' parameter.

This Metasploit module exploits a command injection vulnerability in Sophos Web Protection Appliance versions 3.7.9, 3.8.0, and 3.8.1 via the sblistpack component. It leverages an unauthenticated POST request to execute arbitrary commands by injecting payloads into the 'domain' parameter.