Paid TO Read Script Project
Paid TO Read Script Project Paid TO Read Script: vulnerabilidades y CVE
Paid TO Read Script Project Paid TO Read Script tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2017-17779 | Crítica (9.8) | 1.1% | — | 20 dic 2017 | Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. |
| CVE-2017-17778 | Media (4.8) | 0.52% | — | 20 dic 2017 | Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter. |
| CVE-2017-17777 | Crítica (9.8) | 1.5% | — | 20 dic 2017 | Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter. |
| CVE-2017-17776 | Media (5.3) | 0.91% | — | 20 dic 2017 | Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. |
| CVE-2017-17651 | Crítica (9.8) | 3.0% | — | 18 dic 2017 | Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter. |