CVE-2017-17776: Exposure of Sensitive Information to an Unauthorized Actor

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17778: Improper Neutralization of Input During Web Page Generation

Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...

CVE-2017-17777: Improper Authentication

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

CVE-2017-17779: Improper Neutralization of Special Elements used in an SQL Command

Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651

CVE-2017-17651 affects Paid To Read Script 2.0.5 with a SQL Injection flaw in multiple admin endpoints: uid in admin/userview.php, fnum in admin/viewemcamp.php, and fn parameter in admin/viewvisitcamp.php. Root cause: inadequate input handling allows crafted values to terminate and inject SQL. Im...

CVE-2017-17651: Improper Neutralization of Special Elements used in an SQL Command

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

Paid To Read Script 2.0.5 - 'uid' / 'fnum' / 'fn' SQL Injection

Exploit Title: Paid To Read Script 2.0.5 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/paid-to-read-script/ Version: 2.0.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-17651...