petbot / petbot-device Goto Github PK

Reported to happen in firefox, video size is not consistent across sessions

First sound usually plays, after that does not work

When on android phone browser (WIFI), sounds list does not appear

Allow user to upload own sound clips

Have a log for when treats were dispensed

I can't help but notice that static/wifi_connect.php looks an awful lot like a possible code execution vulnerability.
Suppose someone would make a post request with an ssid like ; sudo rm -rf /*
This issue can easily be understood from the following script:

<?php
  $foo = "foo; whoami";
  echo shell_exec("echo $foo");
  $bar = escapeshellarg($foo);
  echo shell_exec("echo $bar");
?>