PatchTheCVE: paid to read script projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-17779: Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.https://patchthecve.com/cve/CVE-2017-17779.htmlhttps://patchthecve.com/cve/CVE-2017-17779.htmlWed, 17 Jun 2026 01:11:38 +0000CRITICAL 9.8: Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.CVE-2017-17778: Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameterhttps://patchthecve.com/cve/CVE-2017-17778.htmlhttps://patchthecve.com/cve/CVE-2017-17778.htmlWed, 17 Jun 2026 01:11:37 +0000MEDIUM 4.8: Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.CVE-2017-17777: Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated bhttps://patchthecve.com/cve/CVE-2017-17777.htmlhttps://patchthecve.com/cve/CVE-2017-17777.htmlWed, 17 Jun 2026 01:11:37 +0000CRITICAL 9.8: Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.CVE-2017-17776: Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.https://patchthecve.com/cve/CVE-2017-17776.htmlhttps://patchthecve.com/cve/CVE-2017-17776.htmlWed, 17 Jun 2026 01:11:37 +0000MEDIUM 5.3: Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.CVE-2017-17651: Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.phphttps://patchthecve.com/cve/CVE-2017-17651.htmlhttps://patchthecve.com/cve/CVE-2017-17651.htmlWed, 17 Jun 2026 01:11:26 +0000CRITICAL 9.8: Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.