Skip to content

CVE-2017-11679 Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.

HighCVSS 8.8 EPSS 0.68%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.

Affected products

ProductAffected versionsFixed in
hashtopus project hashtopus = 1.5g No fix listed

References

  • 99984 third-party-advisory vdb-entry
  • github.com exploit third-party-advisory