CVE-2017-17779

概要

参考情報

• d4wner/Vulnerabilities-Report · Exploit

paid to read script のその他の脆弱性

• CVE-2017-17778中 4.8Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.
• CVE-2017-17777緊急 9.8Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php …
• CVE-2017-17776中 5.3Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
• CVE-2017-17651緊急 9.8Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/…