GCVE - cpe:2.3:a:paid_to_read_script_project:paid_to_read

Approved changes feed: RSS · Atom

cpe:2.3:a:paid_to_read_script_project:paid_to_read_script:2.0.5:*:*:*:*:*:*:*

part: a version: 2.0.5 update: *

Vendor	Paid To Read Script Project (`6e499b24-1a9d-5557-a782-b404fadcb75e`)
Product	Paid To Read Script (`d7a292b8-b734-5df8-b384-fa2d68f88f24`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-17779`	vulnerable	2026-06-08 05:09:09.896118	Details available Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter. Published: 2017-12-20T03:00:00.000Z Updated: 2024-08-05T20:59:17.967Z Open on db.gcve.eu Reference links https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17778`	vulnerable	2026-06-08 05:09:09.895858	Details available Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter. Published: 2017-12-20T03:00:00.000Z Updated: 2024-08-05T20:59:17.917Z Open on db.gcve.eu Reference links https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17777`	vulnerable	2026-06-08 05:09:09.895596	Details available Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter. Published: 2017-12-20T03:00:00.000Z Updated: 2024-08-05T20:59:17.974Z Open on db.gcve.eu Reference links https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17776`	vulnerable	2026-06-08 05:09:09.895311	Details available Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter. Published: 2017-12-20T03:00:00.000Z Updated: 2024-08-05T20:59:17.880Z Open on db.gcve.eu Reference links https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17651`	vulnerable	2026-06-08 05:09:09.703294	Details available Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter. Published: 2017-12-18T09:00:00.000Z Updated: 2024-08-05T20:59:17.143Z Open on db.gcve.eu Reference links https://packetstormsecurity.com/files/145439/Paid-To-Read-Script-2.0.5-SQL-Injection.html https://www.exploit-db.com/exploits/43334/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Paid to read script Project Paid to read script 2.0.5

Notes

PURL mappings

Vulnerability references

Contribute