Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.21%
Published
Jul 27, 2017
Modified
May 12, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrative roles, as demonstrated by an action=createVoucher request to agents.php.
Weaknesses (CWE)
Affected Products (1)
References (2)