CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: shell metacharacter injection in www/modules/save.php in fruitywifi (aka patatasfritas/patatawifi) through 2.4 allows remote attackers to execute arbitrary code with root privileges via a crafted mod_name parameter in a post request. note: unlike in cve-2018-17317, the attacker does not need a valid session.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-11-11
Last Modified Date: 2019-10-03