medium5.0Public exploit code
CVE-2005-0345
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Fusion 4.0 - 'Viewthread.php' Information Disclosure2005-02-08 · webapps · php · Verified
Impact
viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Fusion | Php Fusion | Version 4.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110788267311132&w=2
- http://www.securityfocus.com/bid/12482
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19257
- http://marc.info/?l=bugtraq&m=110788267311132&w=2
- http://www.securityfocus.com/bid/12482
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19257