VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 13, 2015· Updated Jun 17, 2026

CVE-2014-10030

CVE-2014-10030

Description

Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

Affected products

9
  • Fluxbb/Fluxbb9 versions
    cpe:2.3:a:fluxbb:fluxbb:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:fluxbb:fluxbb:*:*:*:*:*:*:*:*range: <=1.4.11
    • cpe:2.3:a:fluxbb:fluxbb:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fluxbb:fluxbb:1.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fluxbb:fluxbb:1.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fluxbb:fluxbb:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fluxbb:fluxbb:1.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:fluxbb:fluxbb:1.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:fluxbb:fluxbb:1.5.6:*:*:*:*:*:*:*
    • (no CPE)range: <1.4.13, <1.5.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.