Description

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.

Remediation

References

CVE-2014-10029

Related Vulnerabilities

Magento CVE-2020-3718 Vulnerability (CVE-2020-3718)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.2.7)

WordPress Plugin Total Sales For Woocommerce Cross-Site Scripting (1.1)

WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.15.2)

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-4432)

Severity

High

Classification

CVE-2014-10029 CWE-138

Tags

Missing Update Known Vulnerabilities