CVE-2017-11679

Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.

Date published : 2017-07-27

http://www.securityfocus.com/bid/99984

https://github.com/curlyboi/hashtopus/issues/63