CVE-2017-17651

Mô tả

Tham khảo

• packetstormsecurity.com/files/145439/Paid-To-Read-Script-2.0.5-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43334 · Exploit

Lỗ hổng khác của paid to read script

• CVE-2017-17779NGHIÊM TRỌNG 9.8Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
• CVE-2017-17778TRUNG BÌNH 4.8Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.
• CVE-2017-17777NGHIÊM TRỌNG 9.8Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php …
• CVE-2017-17776TRUNG BÌNH 5.3Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.