Skip to content
OpenAdvisories

Vendor

FOGProject

19 known vulnerabilities.

Products

fogproject 19
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58443 Public exploit Scanner template EPSS 21%

    FOG's authentication bypass leads to full SQL DB dump

    FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a ful…

    FOGProject fogproject
  • Critical 9.3
    CVE-2024-42348

    FOG leaks sensitive information (AD domain, username and password)

    FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a computer. This vulnerability is fixed in 1.5.10.41.3 and 1.6.0-beta.1395.

    FOGProject fogproject
  • Critical 9.8
    CVE-2024-39914 Public exploit Scanner template EPSS 23%

    FOG has a command injection in /fog/management/export.php?filename=

    FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. This vulnerability is fixed …

    FOGProject fogproject