Vulnerabilities > CVE-2014-10030 - Remote Security vulnerability in FluxBB

CVSS 5.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

network

fluxbb

NVD

Published: 2015-01-13

Updated: 2015-01-14

Summary

Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter. <a href="http://cwe.mitre.org/data/definitions/601.html">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a>

Vulnerable Configurations

Part	Description	Count
Application	Fluxbb Fluxbb Fluxbb 1.2.18 Fluxbb Fluxbb 1.2.19 Fluxbb Fluxbb 1.2.20 Fluxbb Fluxbb 1.2.21 Fluxbb Fluxbb 1.2.22 Fluxbb Fluxbb 1.2.23 Fluxbb Fluxbb 1.2.24 Fluxbb Fluxbb 1.3 Fluxbb Fluxbb 1.4 Fluxbb Fluxbb 1.4.0 Fluxbb Fluxbb 1.4.1 Fluxbb Fluxbb 1.4.2 Fluxbb Fluxbb 1.4.3 Fluxbb Fluxbb 1.4.4 Fluxbb Fluxbb 1.4.5 Fluxbb Fluxbb 1.4.6 Fluxbb Fluxbb 1.4.7 Fluxbb Fluxbb 1.4.11 Fluxbb Fluxbb 1.5.0 Fluxbb Fluxbb 1.5.1 Fluxbb Fluxbb 1.5.2 Fluxbb Fluxbb 1.5.3 Fluxbb Fluxbb 1.5.4 Fluxbb Fluxbb 1.5.5 Fluxbb Fluxbb 1.5.6	29

Summary

Vulnerable Configurations

References