Paid To Read Script Project Paid To Read Script — known CVE vulnerabilities

Every CVE whose affected-product data names Paid To Read Script Project Paid To Read Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-17651 — CVSS 9.8 (critical): Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the…
• CVE-2017-17777 — CVSS 9.8 (critical): Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php…
• CVE-2017-17779 — CVSS 9.8 (critical): Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
• CVE-2017-17776 — CVSS 5.3 (medium): Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
• CVE-2017-17778 — CVSS 4.8 (medium): Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.