Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.

Published Jul 27, 2017 · Updated Aug 5, 2024 · Assigned by mitre