Paid To Read Script
by Paid To Read Script Project
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-17651 | Cri | 0.67 | 9.8 | 0.03 | Dec 18, 2017 | Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter. | ||
| CVE-2017-17779 | Cri | 0.64 | 9.8 | 0.01 | Dec 20, 2017 | Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. | ||
| CVE-2017-17777 | Cri | 0.64 | 9.8 | 0.01 | Dec 20, 2017 | Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter. | ||
| CVE-2017-17776 | Med | 0.35 | 5.3 | 0.01 | Dec 20, 2017 | Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. | ||
| CVE-2017-17778 | Med | 0.31 | 4.8 | 0.01 | Dec 20, 2017 | Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter. |
- risk 0.67cvss 9.8epss 0.03
Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.
- risk 0.64cvss 9.8epss 0.01
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
- risk 0.64cvss 9.8epss 0.01
Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.
- risk 0.35cvss 5.3epss 0.01
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
- risk 0.31cvss 4.8epss 0.01
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.