CVE-2025-58443 PoC — FOG 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58443.yaml

Associated Vulnerability

Title:FOG 访问控制错误漏洞 (CVE-2025-58443)
Description:FOG是FOG Project开源的一个开源计算机克隆与管理系统。 FOG 1.5.10.1673及之前版本存在访问控制错误漏洞，该漏洞源于认证绕过，可能允许攻击者未经认证转储完整SQL数据库。

Description

FOGProject version 1.5.10.1673 suffers from an authentication bypass vulnerability that allows unauthenticated users to access the management interface without proper authentication. This can lead to unauthorized access to system configuration, host management, and potentially database information.

File Snapshot


 id: CVE-2025-58443

info:
  name: FOGProject <= 1.5.10.1673 - Authentication Bypass
  author: olevel

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!