Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

paid_to_read_script_project / paid_to_read_script CVEs

Beta · best-effort

5 CVEs tagged to paid_to_read_script_project / paid_to_read_script — 3 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to paid_to_read_script_project vendor archive

CVE-2017-17779

Published Dec 20, 2017

Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-17778

Published Dec 20, 2017

Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-17777

Published Dec 20, 2017

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-17776

Published Dec 20, 2017

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-17651

Published Dec 18, 2017

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1