Cross-Site Scripting Vulnerabilities in FOG Imaging System by FOG Project

CVE-2014-3111

What is CVE-2014-3111?

The FOG Imaging System versions 0.27 through 0.32 are susceptible to multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web scripts or HTML into various fields including Printer Model, Image Name, Storage Group Name, Username, and Directory Path through specific management pages. Exploitation of these vulnerabilities could lead to unauthorized content being executed in the context of an authenticated user's session, risking sensitive information and system integrity.

References