CyberRota Analysis
AI-GeneratedThe vulnerability affects the FOG project, specifically in the `buildRow()` method of `fogpage.class.php`, where user input is not properly sanitized before being rendered in HTML. This flaw allows unauthenticated attackers to exploit the system by injecting malicious scripts into the inventory database, which can then execute in the administrator's browser when viewing the Group Inventory tab. Organizations using affected versions should prioritize patching to versions 1.5.10.1832 or 1.6.0-beta.2313 to mitigate the risk of cross-site scripting (XSS) attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `buildRow()` method in `fogpage.class.php` substitutes data values into HTML table cell templates using `str_replace()` without any HTML escaping. An unauthenticated attacker who knows any registered host's MAC address can POST malicious inventory values (e.g. `sysproduct`, `sysserial`) to `/service/inventory.php`, which stores them in the database. When an administrator opens the Group Inventory tab, the payload renders as executable HTML/JavaScript in the admin's browser. Versions 1.5.10.1832 and 1.6.0-beta.2313 fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)