https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-11679.htmlhttps://patchthecve.com/cve/CVE-2017-11679.htmlWed, 17 Jun 2026 01:02:11 +0000HIGH 8.8: Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.https://patchthecve.com/cve/CVE-2017-11678.htmlhttps://patchthecve.com/cve/CVE-2017-11678.htmlWed, 17 Jun 2026 01:02:11 +0000HIGH 8.8: SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.https://patchthecve.com/cve/CVE-2017-11677.htmlhttps://patchthecve.com/cve/CVE-2017-11677.htmlWed, 17 Jun 2026 01:02:11 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php.