Description
FOG是一个克隆/映像/恢复套件/清单管理系统。FOG存在远程代码执行漏洞，该漏洞是由于export.php接口对用户发送的请求验证不当导致的。
FOG CVE-2024-39914 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-39914
https://github.com/FOGProject/fogproject/security/advisories/GHSA-7h44-6vq6-cq8j
https://www.offsec.com/blog/cve-2024-39914/
https://medium.com/@dj4msec/cve-2024-39914-bd6696e62782
https://pentest-tools.com/vulnerabilities-exploits/fog-project-151034-remote-command-execution_22980
https://www.sentinelone.com/vulnerability-database/cve-2024-39914/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39914
https://blog.csdn.net/qq_39894062/article/details/140550009
https://rivers.chaitin.cn/blog/cqj67h10lnedo7thpu20