Paid To Read Script Project Paid To Read Script
5 CVEs affecting Paid To Read Script Project Paid To Read Script. Latest disclosed: 2017-12-20. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17779 | Critical | 9.8 | 2017-12-20 | Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. |
CVE-2017-17777 | Critical | 9.8 | 2017-12-20 | Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and th… |
CVE-2017-17651 | Critical | 9.8 | 2017-12-18 | Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php f… |
CVE-2017-17776 | Medium | 5.3 | 2017-12-20 | Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. |
CVE-2017-17778 | Medium | 4.8 | 2017-12-20 | Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter. |