CVE-2017-11682

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-11682
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11682.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-11682
Published
2017-07-27T06:29:00Z
Modified
2026-08-27T08:18:28Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.

References

Affected packages

Git / github.com/hashtopolis/server

Affected ranges

Type
GIT
Repo
https://github.com/hashtopolis/server
Events
Introduced
f875a70a16be98741557fc9f842a56e518dffc55
Last Affected
f875a70a16be98741557fc9f842a56e518dffc55
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:hashtopolis:hashtopolis:0.4.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.4.0"
        },
        {
            "last_affected": "0.4.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

0.*
0.4.0
v0.*
v0.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11682.json"