CVE-2017-11678

概要

参考情報

• securityfocus.com/bid/99982 · Third Party Advisory
• curlyboi/hashtopus · Exploit

hashtopus のその他の脆弱性

• CVE-2017-11679高 8.8Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.
• CVE-2017-11677中 6.1Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query stri…