CVE-2020-24847

A Cross-Site Request Forgery CSRF vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in pageconfigadv.php, an unauthenticated attacker can lure the victim to visit his website by social engineering or another attack vector. Due to this issue, an unauthenticate...

PT-2020-15841

Name of the Vulnerable Software and Affected Versions FruityWifi versions through 2.4 Description A Cross-Site Request Forgery issue is identified due to a lack of protection in the page config adv.php file. This allows an unauthenticated attacker to change the newSSID and hostapd wpa passphrase ...

CVE-2020-24847: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in pageconfigadv.php, an unauthenticated attacker can lure the victim to visit his website by social engineering or another attack vector. Due to this issue, an unauthenticate...