CVE-2016-6405

Cisco Fog Director for IOx (version 1.0(0)) is vulnerable to an arbitrary file write via the Cartridge interface. The root cause is insufficient input validation, allowing an authenticated, remote attacker to bypass access restrictions and write/overwrite arbitrary files. Published advisories (Ci...

CVE-2016-6405: Improper Input Validation

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

PT-2016-6879

Name of the Vulnerable Software and Affected Versions Cisco Fog Director version 1.00 for IOx Description The issue allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface. Recommendations For Cisco Fog Director version 1.0...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote attacker to write a file to arbitrary locations. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface. ...

FOG has multiple vulnerabilities

FOG is a free, open source, computer cloning and management solution. FOG has multiple vulnerabilities that allow input from certain unauthenticated users since parameters in the library function in the FOGManagerController.class.php file are not sanitized. An attacker can leverage this...

Cisco Fog Director Cross-Site Scripting Vulnerability

Cisco Fog Director is an automated management platform for centralized management of multiple applications running at the network edge. The platform enables control of application settings and lifecycles, and supports access to and monitoring of large-scale IoT deployments. A cross-site scripting...

CVE-2016-1306

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

CVE-2016-1306

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

CVE-2016-1306

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

CVE-2016-1306

CVE-2016-1306 covers multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0). Attackers can inject arbitrary script or HTML by manipulating a crafted parameter in the web interface, enabling potential session hijacking or information disclosure when the malicious data is ...

CVE-2016-1306: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

PT-2016-4698

Name of the Vulnerable Software and Affected Versions Cisco Fog Director version 1.00 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted parameter. This can be exploited to conduct cross-site scripting XSS attacks. Recommendations For Cisco Fog...

Cisco Fog Director Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Fog Director web framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation for some of the parameters...

CVE-2014-3111

Multiple cross-site scripting XSS vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Printer Model field to the Printer Management page, 2 Image Name field to the Image Management page, 3 Storage Group Name field to the Stora...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Printer Model field to the Printer Management page, 2 Image Name field to the Image Management page, 3 Storage Group Name field to the Stora...

CVE-2014-3111

Multiple cross-site scripting XSS vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Printer Model field to the Printer Management page, 2 Image Name field to the Image Management page, 3 Storage Group Name field to the Stora...

CVE-2014-3111

CVE-2014-3111 affects the FOG Imaging System (versions 0.27–0.32). The vulnerability is a multiple stored XSS impacting several management pages (Printer Management, Image Management, Storage Management, User Cleanup, Directory Cleaner). Vulnerable input points include fields like Printer Model, ...

PT-2014-5097

Name of the Vulnerable Software and Affected Versions FOG versions 0.27 through 0.32 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via several fields, including the Printer Model field to the "Printer Management" page, the Image Name field to the...