CVE-2014-10030 Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i...
MediumCVSS 5.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fluxbb | <= 1.4.11 | No fix listed |
| fluxbb | = 1.5.0 | No fix listed |
| fluxbb | = 1.5.1 | No fix listed |
| fluxbb | = 1.5.2 | No fix listed |
| fluxbb | = 1.5.3 | No fix listed |
| fluxbb | = 1.5.4 | No fix listed |
| fluxbb | = 1.5.5 | No fix listed |
| fluxbb | = 1.5.6 | No fix listed |
References
- fluxbb.org vendor-advisory
- fluxbb.org exploit