daloRADIUS 0.9-9 – Multiple vulnerabilities leading to arbitrary shell execution

Posted by fwagglechop on Oct 24

I know ancient PHP apps is kinda cheating, but there are people running this…

Abstract
——–

“daloRADIUS is an advanced RADIUS web management application aimed at
managing hotspots and general-purpose ISP deployments. It features
user management, graphical reporting, accounting, a billing engine and
integrates with GoogleMaps for geo-locating.”[1]

While auditing this software for a business we found multiple
potential security…

Leave a Reply