Test ID:	1.3.6.1.4.1.25623.1.0.106383
Category:	Web application abuses
Title:	FOG Server < 1.3.0 Multiple Vulnerabilities - Active Check
Summary:	FOG Server is prone to multiple vulnerabilities.
Description:	Summary: FOG Server is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - SQL injection: The database functions located in the FOGManagerController.class.php file do not sanitize some parameters, which can input from unauthenticated users. - Remote Command Execution: The freespace.php file does not correctly sanitize user-supplied 'idnew' parameters. An unauthenticated attacker may use this file to execute system commands. Vulnerability Impact: An authenticated attacker may execute arbitrary system commands or retrieve sensitive information from the database. Affected Software/OS: FOG Server version 1.2.0 and prior. Solution: Update to version 1.3.0 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.