PT-2020-15843

Name of the Vulnerable Software and Affected Versions FruityWifi versions through 2.4 Description A remote code execution issue is identified due to improperly escaped shell metacharacters obtained from the POST request at the "page config adv.php" page, allowing an authenticated attacker to...

PT-2020-15841

Name of the Vulnerable Software and Affected Versions FruityWifi versions through 2.4 Description A Cross-Site Request Forgery issue is identified due to a lack of protection in the page config adv.php file. This allows an unauthenticated attacker to change the newSSID and hostapd wpa passphrase ...