paid to read script project vulnerabilities

Products

• paid to read script 5

Latest paid to read script project CVEs

Newest publication first

1. CVE-2017-17779 Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.

   Published 2017-12-20

   Critical·CVSS 9.8 EPSS 1.1%

   Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.

2. CVE-2017-17778 Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.

   Published 2017-12-20

   Medium·CVSS 4.8 EPSS 0.52%

   Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.

3. CVE-2017-17777 Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.

   Published 2017-12-20

   Critical·CVSS 9.8 EPSS 1.5%

   Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.

4. CVE-2017-17776 Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.

   Published 2017-12-20

   Medium·CVSS 5.3 EPSS 0.91%

   Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.

5. CVE-2017-17651 Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.

   Published 2017-12-18

   Critical·CVSS 9.8 EPSS 3.1% Public exploit

   Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.