Vendor archive

project_hashtopussy CVEs

Beta · best-effort

2 CVEs tagged to vendor project_hashtopussy — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2017-11681

Published Jul 27, 2017

Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonst…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2017-11680

Published Jul 27, 2017

Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1