CVE-2017-11678

SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php.

An attacker could exploit this vulnerability to gain access to sensitive data or manipulate the database, potentially leading to serious consequences for the organization.

It is recommended to update Hashtopus to the latest version and implement appropriate input filtering and validation in the application.