CVE-2014-10029

HIGH 7.5CVE-2014-10029 · Published 13/01/2015 · updated 17/06/2026

In short

CVE-2014-10029 is a HIGH (CVSS 7.5) vulnerability affecting fluxbb (fluxbb).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fluxbb fluxbb	`= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6≤ 1.4.11`	No fix yet

Description

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.

References

fluxbb.org/forums/viewtopic.php · Vendor Advisory
packetstormsecurity.com/files/129225/FluxBB-1.5.6-SQL-Injection.html · Exploit
seclists.org/fulldisclosure/2014/Nov/73 · Exploit
secunia.com/advisories/59038
exchange.xforce.ibmcloud.com/vulnerabilities/98890
fluxbb.org/development/core/tickets/990 · Vendor Advisory

More vulnerabilities in fluxbb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free