This page lists publicly disclosed CVE vulnerabilities affecting paid_to_read_script_project paid_to_read_script (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2017-17779 | Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. | [email protected] | 9.8 | 1.10% | 2017-12-19 | 2026-06-16 |
| CVE-2017-17778 | Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter. | [email protected] | 4.8 | 0.52% | 2017-12-19 | 2026-06-16 |
| CVE-2017-17777 | Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter. | [email protected] | 9.8 | 1.48% | 2017-12-19 | 2026-06-16 |
| CVE-2017-17776 | Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. | [email protected] | 5.3 | 0.91% | 2017-12-19 | 2026-06-16 |
| CVE-2017-17651 | Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter. | [email protected] | 9.8 | 3.05% | 2017-12-18 | 2026-06-16 |