PT-2017-14995

CVE-2017-17778

·

Publicado

2017-12-20

·

Atualizado

2018-01-03

Descrição por

CVSS 3.1
4.8
Média
MétricasAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5
Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible through the tier parameter in the "referrals.php" endpoint or the uid parameter in the "admin/userview.php" endpoint.
Recommendations For Paid To Read Script version 2.0.5, consider restricting access to the referrals.php and admin/userview.php endpoints until a fix is available. As a temporary workaround, avoid using the tier and uid parameters in these endpoints to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾