Skip to content
OpenAdvisories

Vendor

FOGProject

19 known vulnerabilities.

Products

fogproject 19
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58443 Public exploit EPSS 21%

    FOG's authentication bypass leads to full SQL DB dump

    FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a ful…

    FOGProject fogproject
  • Critical 9.8
    CVE-2024-39914 Public exploit EPSS 23%

    FOG has a command injection in /fog/management/export.php?filename=

    FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. This vulnerability is fixed …

    FOGProject fogproject