Vulnerabilities

TI-2017-08650 CVE-2017-11679 · GHSA-cm3f-4gg2-p5v7

Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to…

LOW 39

Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00683 Published 2017-07-27 No fix listed CWE-352

TI-2017-08649 CVE-2017-11678 · GHSA-hm7m-jjp9-g4gw

SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to…

MEDIUM 41

SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0168 Published 2017-07-27 No fix listed CWE-89

TI-2017-08648 CVE-2017-11677 · GHSA-gcmh-g2cv-7mfh

Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to…

LOW 29

Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00943 Published 2017-07-27 No fix listed CWE-79

Vulnerabilities

Filters

Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to…

SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to…

Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to…