Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthenticated attacker can lure the victim to visit his website by social engineering or another attack vector. Due to this issue, an unauthenticated attacker can change the newSSID and hostapd_wpa_passphrase.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FruityWifi 跨站请求伪造漏洞
Vulnerability Description
FruityWifi是一款无线网络审计工具。 FruityWifi 2.4版本及之前版本存在跨站请求伪造漏洞，该漏洞源于在page config .php中缺少CSRF保护，未攻击者可利用该漏洞可以通过社会工程或其他攻击向量来引诱受害者访问其网站，更改newSSID和hostapd wpa密码。
CVSS Information
N/A
Vulnerability Type
N/A