Authentication flaw

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

CVE-2017-17777: Improper Authentication

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter...

PT-2017-14994

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns an authentication bypass in the admin panel, which can be exploited via a direct request. Specifically, the fn parameter in the "admin/viewvisitcamp.php" endpoint and the uid...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651: Improper Neutralization of Special Elements used in an SQL Command

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

PT-2017-14943

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are uid in 'admin/userview.php', fnum in 'admin/viewemcamp.php', and...