CVE-2017-17777

Critical

Published: 20/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Paid To Read Script version 2.0.5 has an authentication bypass vulnerability in the admin panel via a direct request, as demonstrated by the fn parameter in admin/viewvisitcamp.php and the uid parameter in admin/userview.php.

Risk Assessment

This vulnerability may allow unauthorized users to access sensitive data in the admin panel, posing a serious security threat to the system.

Recommendation

It is recommended to update the script to the latest version and implement additional security measures to protect access to the admin panel.

Original NVD description (English source)

Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.