Vifi Radio 1 Shell Upload / CSRF

Vifi Radio version 1 suffers from a cross site request forgery vulnerability. Exploit to upload a shell included.