FruityWifi Cross-Site Request Forgery Vulnerability

FruityWifi is a wireless network auditing tool. A cross-site request forgery vulnerability exists in FruityWifi version 2.4 and earlier versions, which stems from the lack of CSRF protection in page config .php, and can be exploited by an unauthenticated attacker to lure a victim to visit his/her...

CVE-2018-17317: Improper Neutralization of Special Elements used in an OS Command

FruityWifi aka PatatasFritas/PatataWifi 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iomode, apmode, ioaction, ioiniface, ioinset, ioinip, ioinmask, ioingw, iooutiface, iooutset, iooutmask, iooutgw, iface, or domain parameter to...