TI-2020-15214 CVE-2020-24849 · GHSA-37xx-h5fj-hm7p
A remote code execution vulnerability is identified in FruityWifi through 2.4.
Priority MEDIUM 44
A remote code execution vulnerability is identified in FruityWifi through 2.4.
Vulnerabilities
5 records
TI-2020-15213 CVE-2020-24848 · GHSA-qv32-fg95-8497
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL].
Priority LOW 34
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL].
TI-2020-15212 CVE-2020-24847 · GHSA-7697-5c7w-4x9p
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4.
Priority LOW 20
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4.
TI-2018-13599 CVE-2018-19168 · GHSA-24fx-v9pv-mr36
Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka…
Priority MEDIUM 51
Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to execute arbitrary code with root privileges via a crafted mod_name parameter in a…
TI-2018-12355 CVE-2018-17317 · GHSA-hcxv-fxw3-wqch
FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute…
Priority MEDIUM 49
FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode, ap_mode, io_action, io_in_iface, io_in_set, io_in_ip, io_in_mask, io_in_gw, io_…