high8.8
CVE-2017-11678
SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.
Impact
SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hashtopus Project | Hashtopus | Version 1.5g |