Lucene search

[email protected]CVE-2005-4517

HistoryDec 28, 2005 - 1:03 a.m.

CVE-2005-4517

2005-12-2801:03:00

[email protected]

web.nvd.nist.gov

cve-2005-4517

sql injection

php-fusion

ratings parameter

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.111 Low

EPSS

Percentile

95.2%

JSON

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php.

Affected configurations

NVD

Node

php_fusionphp_fusionMatch6.00.200

php_fusionphp_fusionMatch6.00.206

php_fusionphp_fusionMatch6.00.207

php_fusionphp_fusionMatch6.00.300

CPENameOperatorVersion
php_fusion:php_fusionphp fusioneq6.00.200
php_fusion:php_fusionphp fusioneq6.00.206
php_fusion:php_fusionphp fusioneq6.00.207
php_fusion:php_fusionphp fusioneq6.00.300

CPE	Name	Operator	Version
php_fusion:php_fusion	php fusion	eq	6.00.200
php_fusion:php_fusion	php fusion	eq	6.00.206
php_fusion:php_fusion	php fusion	eq	6.00.207
php_fusion:php_fusion	php fusion	eq	6.00.300

References

secunia.com/advisories/18190/

securityreason.com/securityalert/272

www.osvdb.org/22049

www.securityfocus.com/archive/1/420109/100/0/threaded

www.vupen.com/english/advisories/2005/3063

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.111 Low

EPSS

Percentile

95.2%

JSON

Related for CVE-2005-4517

nvd1 cvelist1