Wifi-soft vulnerabilities
We track 4 vulnerabilities in Wifi-soft products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2025.
Latest Wifi-soft vulnerabilities
- 8.8 High severity
UniBox Controller: Improper Neutralization of Special Elements used in a Command
A vulnerability, which was classified as critical, was found in Wifi-soft UniBox Controller up to 20250506. This affects an unknown part of the file /billing/pms_check.php. The manipulation of the argument ipaddress leads to os command injection. It is possibl
- 8.8 High severity
UniBox Controller: Improper Neutralization of Special Elements used in a Command
A vulnerability, which was classified as critical, has been found in Wifi-soft UniBox Controller up to 20250506. Affected by this issue is some unknown functionality of the file /billing/test_accesscodelogin.php. The manipulation of the argument Password leads
- 8.8 High severity
UniBox Controller: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical was found in Wifi-soft UniBox Controller up to 20250506. Affected by this vulnerability is an unknown functionality of the file /authentication/logout.php. The manipulation of the argument mac_address leads to os command
- 9.8 Critical severity
Unibox Administration: Improper Neutralization of Special Elements used in an SQL Command
Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.