EUVD-2017-8929

Malware in sbrugna...

Path traversal

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17778

Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...

CVE-2017-17778

Paid To Read Script 2.0.5 contains a cross-site scripting (XSS) vulnerability exploitable via the referrals.php tier parameter or the admin/userview.php uid parameter. The CVE entry is supported by multiple connected records (NVD and CNVD variants) stating the same vectors. The exact root cause a...

CVE-2017-17778: Improper Neutralization of Input During Web Page Generation

Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...

CVE-2017-17777: Improper Authentication

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

CVE-2017-17776: Exposure of Sensitive Information to an Unauthorized Actor

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

PT-2017-14993

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue is related to full path disclosure. This occurs when an invalid uid parameter is provided in the admin/userview.php endpoint. Recommendations For Paid To Read Script version 2.0.5, consid...

PT-2017-14994

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns an authentication bypass in the admin panel, which can be exploited via a direct request. Specifically, the fn parameter in the "admin/viewvisitcamp.php" endpoint and the uid...

PT-2017-14995

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible through the tier parameter in the "referrals.php" endpoint or the uid parameter in the...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651: Improper Neutralization of Special Elements used in an SQL Command

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

PT-2017-14943

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are uid in 'admin/userview.php', fnum in 'admin/viewemcamp.php', and...