CVE-2017-11679: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action...

PT-2017-12170

Name of the Vulnerable Software and Affected Versions Hashtopus version 1.5g Description A Cross-Site Request Forgery CSRF issue exists, allowing unauthorized actions via the password parameter to "admin.php" in an "a=config" action. Recommendations For version 1.5g, consider restricting access t...