## https://sploitus.com/exploit?id=A0F12A97-CC8E-5471-B7E7-315DCB4B7B1A
# CVE-2025-58443
exploit POC for https://github.com/FOGProject/fogproject which is authentication bypass leads to dump DB that include full DB dump, that include clear text password and users and admin password hash.
vulnerable version : 1.5.10.1673
below a script that will exploit the vulnerability and can do the following :
Dump Full MysqlDB
exploit SSRF vulnerability
list files on the server
the DB dump contains the hashed passwords and clear text passwords for FTPs etc ...
resuts :
SSRF exploit :
list files exploit :
```
I, the creator, am not responsible for any actions, and or damages, caused by this software.
You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only.
This software's main purpose is NOT to be used maliciously, or on any system that you do not own, or have the right to use.
By using this software, you automatically agree to the above.
```