Security Advisory
CVE-2017-11679
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.