CVE-2017-17777

Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5

Description The issue concerns an authentication bypass in the admin panel, which can be exploited via a direct request. Specifically, the fn parameter in the "admin/viewvisitcamp.php" endpoint and the uid parameter in the "admin/userview.php" endpoint are vulnerable.

Recommendations For Paid To Read Script version 2.0.5, consider restricting access to the admin panel until a fix is available. As a temporary workaround, avoid using the fn parameter in the "admin/viewvisitcamp.php" endpoint and the uid parameter in the "admin/userview.php" endpoint to minimize the risk of exploitation.