CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2017/12/20 12:00 a.m.•4 views

CVE-2017-17777: Improper Authentication

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

9.8CVSS8.1AI score0.01482EPSS

SaveExploits1References2

NVD•added 2017/12/18 9:29 a.m.•33 views

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

9.8CVSS10AI score0.0305EPSS

SaveExploits5References2

Rapid7 Vulnerability Database (full)•added 2017/12/18 12:00 a.m.•1 views

CVE-2017-17651: Improper Neutralization of Special Elements used in an SQL Command

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

9.8CVSS8.1AI score0.0305EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by