CVE-2014-10030

MEDIUM 5.8CVE-2014-10030 · Published 13/01/2015 · updated 17/06/2026

In short

CVE-2014-10030 is a MEDIUM (CVSS 5.8) vulnerability affecting fluxbb (fluxbb).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fluxbb fluxbb	`= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6≤ 1.4.11`	No fix yet

Description

Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

References

fluxbb.org/forums/viewtopic.php · Vendor Advisory
fluxbb.org/development/core/tickets/961 · Exploit

More vulnerabilities in fluxbb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free