Vulnerability in Fluxbb

CVE-2014-10030

Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

EPSS: 0.016 (73.8th percentile) — read the EPSS interpretation.

Affected products

  • Fluxbb — versions 1.5.0, 1.5.1, 1.5.2
  • N/a — versions n/a

References