CVE-2005-4517 in PHP-Fusion
Summary
by MITRE
SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 09/22/2025
The vulnerability described in CVE-2005-4517 represents a critical sql injection flaw affecting PHP-Fusion versions 6.00.200 through 6.00.300. This vulnerability resides in the ratings parameter handling within multiple scripts including ratings_include.php, making it a widespread issue across the affected software ecosystem. The flaw allows remote attackers to manipulate database queries by injecting malicious sql code through the ratings parameter, potentially compromising the entire database infrastructure.
The technical implementation of this vulnerability stems from insufficient input validation and sanitization within the php-fusion application's rating systems. When users interact with the ratings functionality, the application fails to properly escape or filter user-supplied input before incorporating it into sql queries. This primitive injection vector enables attackers to craft malicious payloads that bypass normal input restrictions and directly manipulate the underlying database operations. The vulnerability specifically affects the ratings parameter, which is processed in multiple scripts, amplifying the attack surface and increasing the likelihood of successful exploitation.
From an operational perspective, this vulnerability presents severe consequences for affected systems. Remote attackers can execute arbitrary sql commands, potentially leading to data theft, data corruption, unauthorized access to sensitive information, and complete database compromise. The impact extends beyond simple data extraction as attackers may escalate privileges, create backdoors, or even gain shell access to the underlying server. The widespread nature of the vulnerability across multiple scripts within the php-fusion framework means that exploitation can occur through various attack vectors, making it particularly dangerous for organizations running these specific versions of the content management system.
The vulnerability aligns with CWE-89, which specifically addresses sql injection flaws in software applications. This categorization places the issue within the broader context of common weakness enumerations that affect web applications and database systems. From an attack framework perspective, this vulnerability maps to several ATT&CK techniques including T1190 for exploit public-facing applications and T1071.004 for application layer protocol. The attack chain typically involves reconnaissance to identify vulnerable systems, crafting malicious sql payloads targeting the ratings parameter, and executing commands to achieve the attacker's objectives. Organizations should consider implementing input validation, parameterized queries, and proper output encoding as primary mitigation strategies. Additionally, regular security updates, web application firewalls, and database access controls provide layered defense mechanisms to reduce the risk of exploitation and limit potential damage from successful attacks.