Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
| Software | From | Fixed in |
|---|---|---|
| fluxbb / fluxbb | 1.5.1 | 1.5.1.x |
| fluxbb / fluxbb | 1.5.4 | 1.5.4.x |
| fluxbb / fluxbb | 1.5.6 | 1.5.6.x |
| fluxbb / fluxbb | 1.5.2 | 1.5.2.x |
| fluxbb / fluxbb | 1.5.0 | 1.5.0.x |
| fluxbb / fluxbb | - | 1.4.11.x |
| fluxbb / fluxbb | 1.5.3 | 1.5.3.x |
| fluxbb / fluxbb | 1.5.5 | 1.5.5.x |