critical9.8
CVE-2017-17777
Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and th…
Impact
Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paid To Read Script Project | Paid To Read Script | Version 2.0.5 |