Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior

Críticas / altas1419▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-17779	Modificada	Crítica (9.8)	1.1%	—	Paid TO Read Script Project Paid TO Read Script	20/12/2017	17/6/2026	Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
CVE-2017-17778	Modificada	Media (4.8)	0.52%	—	Paid TO Read Script Project Paid TO Read Script	20/12/2017	17/6/2026	Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.
CVE-2017-17777	Modificada	Crítica (9.8)	1.5%	—	Paid TO Read Script Project Paid TO Read Script	20/12/2017	17/6/2026	Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.
CVE-2017-17776	Modificada	Media (5.3)	0.91%	—	Paid TO Read Script Project Paid TO Read Script	20/12/2017	17/6/2026	Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
CVE-2017-17651	Modificada	Crítica (9.8)	3.0%	—	Paid TO Read Script Project Paid TO Read Script	18/12/2017	17/6/2026	Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.