Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fluxbb | Fluxbb | * | 1.4.11 (including) |
| Fluxbb | Fluxbb | 1.5.0 (including) | 1.5.0 (including) |
| Fluxbb | Fluxbb | 1.5.1 (including) | 1.5.1 (including) |
| Fluxbb | Fluxbb | 1.5.2 (including) | 1.5.2 (including) |
| Fluxbb | Fluxbb | 1.5.3 (including) | 1.5.3 (including) |
| Fluxbb | Fluxbb | 1.5.4 (including) | 1.5.4 (including) |
| Fluxbb | Fluxbb | 1.5.5 (including) | 1.5.5 (including) |
| Fluxbb | Fluxbb | 1.5.6 (including) | 1.5.6 (including) |