FL
Vendor
Fluxbb
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-44110 | FL Fluxbb Fluxbb | 5.4 | May 15 | FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php |
| CVE-2021-43677 | FL Fluxbb Fluxbb | 6.1 | Jan 4 | Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability |
| CVE-2020-28873 | FL Fluxbb Fluxbb | 7.5 | Mar 17 | Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form |
| CVE-2020-35240 | FL Fluxbb Fluxbb | 4.8 | Dec 30 | FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component |
| CVE-2011-3621 | FL Fluxbb Fluxbb | 9.8 | Jan 22 | A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled |
| CVE-2014-9574 | FL Fluxbb Fluxbb | – | Feb 3 | Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a |
| CVE-2014-10030 | FL Fluxbb Fluxbb | – | Jan 13 | Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct… |
| CVE-2014-10029 | FL Fluxbb Fluxbb | – | Jan 13 | SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter |