fogproject — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in fogproject, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-33739	FOG has Stored XSS in Multiple Management Pages CWE-79	5.7	Medium	2026-03-27
CVE-2026-24138	FOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php` CWE-918	7.5	High	2026-01-23
CVE-2025-58443	FOG's authentication bypass leads to full SQL DB dump CWE-306	9.8^AI	Critical^AI	2025-09-06
CVE-2024-42349	FOG has a Log Information Disclosure CWE-532	5.3	Medium	2024-08-02
CVE-2024-42348	FOG leaks sensitive information (AD domain, username and password) CWE-77	9.3	Critical	2024-08-02
CVE-2024-41954	FOG Weak file permissions CWE-732	5.3	Medium	2024-07-31
CVE-2024-41108	FOG Sensitive Information Disclosure CWE-200	7.5	High	2024-07-31
CVE-2024-40645	FOG Authenticated File Upload RCE CWE-434	8.8	High	2024-07-31
CVE-2024-39916	NFS server misconfiguration allows file access outside the exported directory CWE-453	6.4	Medium	2024-07-12
CVE-2024-39914	FOG has a command injection in /fog/management/export.php?filename= CWE-77	9.8	Critical	2024-07-12
CVE-2023-46237	FOG path traversal via unauthenticated endpoint CWE-22	5.8	Medium	2023-10-31
CVE-2023-46236	FOG SSRF via unauthenticated endpoint(s) CWE-918	8.6	High	2023-10-31
CVE-2023-46235	FOG stored XSS on log screen via unsanitized request logging CWE-79	5.4	Medium	2023-10-31

All 13 known CVE vulnerabilities affecting fogproject with full Chinese analysis, references, and POCs where available.