PT-2017-14995
CVE-2017-17778
·
Publicado
2017-12-20
·
Atualizado
2018-01-03
Descrição por
CVSS 3.1
4.8
MédiaMétricasAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Paid To Read Script version 2.0.5
Description
The issue concerns a security problem where an attacker can execute malicious scripts. This is possible through the
tier parameter in the "referrals.php" endpoint or the uid parameter in the "admin/userview.php" endpoint.Recommendations
For Paid To Read Script version 2.0.5, consider restricting access to the
referrals.php and admin/userview.php endpoints until a fix is available. As a temporary workaround, avoid using the tier and uid parameters in these endpoints to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾