CVE-2017-17651

Critical

Published: 18/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Paid To Read Script version 2.0.5 has an SQL Injection vulnerability via the uid parameter in admin/userview.php, the fnum parameter in admin/viewemcamp.php, or the fn parameter in admin/viewvisitcamp.php.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation in the application.

Original NVD description (English source)

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.