high8.8
CVE-2017-11679
Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.
Impact
Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hashtopus Project | Hashtopus | Version 1.5g |