CVE-2017-17779
CriticalSummary
Paid To Read Script version 2.0.5 has a SQL injection vulnerability via the id parameter in referrals.php.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to update the script to the latest version and implement appropriate protections against SQL injection attacks.
Other vulnerabilities in Paid To Read Script 2.0.5
See all- CVE-2017-17777Critical
Paid To Read Script version 2.0.5 has an authentication bypass vulnerability in the admin panel via a direct request, as demonstrated by the fn parameter in admin/viewvisitcamp.php and the uid parameter in admin/userview.php.
- CVE-2017-17651Critical
Paid To Read Script version 2.0.5 has an SQL Injection vulnerability via the uid parameter in admin/userview.php, the fnum parameter in admin/viewemcamp.php, or the fn parameter in admin/viewvisitcamp.php.
Original NVD description (English source)
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.