Fruitywifi Project Fruitywifi
5 CVEs affecting Fruitywifi Project Fruitywifi. Latest disclosed: 2020-11-05. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19168 | Critical | 9.8 | 2018-11-11 | Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to execute arbitrary cod… |
CVE-2018-17317 | Critical | 9.8 | 2018-09-21 | FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode, ap_mode, io_action… |
CVE-2020-24849 | High | 8.8 | 2020-11-05 | A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at… |
CVE-2020-24848 | High | 7.8 | 2020-10-23 | FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege e… |
CVE-2020-24847 | Medium | 4.3 | 2020-10-23 | A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthen… |