Description

Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.

Remediation

References

CVE-2014-10030

Related Vulnerabilities

WordPress Plugin Login as User or Customer Security Bypass (1.7)

WordPress 4.6.x Possible SQL Injection Vulnerability (4.6 - 4.6.7)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45137)

WordPress Plugin Shareaholic-share buttons, related posts, social analytics & more Cross-Site Request Forgery (7.0.3.3)

Frontaccounting Other Vulnerability (CVE-2007-4279)

Severity

Medium

Classification

CVE-2014-10030

Tags

Missing Update Known Vulnerabilities