Paid To Read Script

paid_to_read_script

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-17779 1Paid To Read Script Project 1Paid To Read Script May 13, 2026 Dec 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
CVE-2017-17778 1Paid To Read Script Project 1Paid To Read Script May 13, 2026 Dec 20, 2017 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.
CVE-2017-17777 1Paid To Read Script Project 1Paid To Read Script May 13, 2026 Dec 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.
CVE-2017-17776 1Paid To Read Script Project 1Paid To Read Script May 13, 2026 Dec 20, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
CVE-2017-17651 1Paid To Read Script Project 1Paid To Read Script May 13, 2026 Dec 18, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.