Export limit exceeded: 425979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2017-11677

Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hashtopus Project
Products
Hashtopus
CVE-2017-11678

SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Hashtopus Project
Products
Hashtopus
CVE-2017-11679

Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Hashtopus Project
Products
Hashtopus