CVE-2005-0345

php-fusion 4.x - Unauthenticated Protected Forum Access via thread_id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0345. PoCs published by TheGreatOne2176.

AI-analyzed exploit summary The provided text describes an information disclosure vulnerability in PHP-Fusion 4, where improper input sanitization allows attackers to view protected forum threads by manipulating URL parameters. No actual exploit code is present, only a description and example URL.

Description

viewthread.php in php-fusion 4.x does not check the (1) forum_id or (2) forum_cat parameters, which allows remote attackers to view protected forums via the thread_id parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by TheGreatOne2176 · textwebappsphp
https://www.exploit-db.com/exploits/25089

The provided text describes an information disclosure vulnerability in PHP-Fusion 4, where improper input sanitization allows attackers to view protected forum threads by manipulating URL parameters. No actual exploit code is present, only a description and example URL.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: PHP-Fusion 4 (earlier versions may also be affected)
No auth needed
Prerequisites: Access to the target application's forum URL
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110788267311132&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12482
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/19257

Scores

EPSS 0.0283
EPSS Percentile 85.2%

Details

Status published
Products (1)
php_fusion/php_fusion 4.0
Published May 02, 2005
Tracked Since Feb 18, 2026