EUVD-2020-22918

Malware in sbrugna...

CVE-2021-43677

Fluxbb v1.4.12 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

CVE-2025-44110

FluxBB version 1.5.11 is vulnerable to a Cross Site Scripting (XSS) flaw located in the Forum Description Field within the admin_forums.php page. This vulnerability allows for the potential execution of malicious scripts in the context of the user's browser. To remediate this, users should update...

PT-2025-21350 · Fluxbb · Fluxbb

Name of the Vulnerable Software and Affected Versions: FluxBB version 1.5.11 Description: The issue is related to Cross Site Scripting XSS via the Forum Description Field in admin forums.php. This allows for potential malicious script execution. No information is provided about the estimated numb...

Fluxbb Cross-Site Scripting Vulnerability

Fluxbb is a Php-based forum system from the Fluxbb organization. fluxbb has a cross-site scripting vulnerability in v1.4.12, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on the client...

Fluxbb Denial of Service Vulnerability

FluxBB is an open source forum application. A denial of service vulnerability exists in Fluxbb 1.5.11. The vulnerability can be exploited to cause a denial of service by sending a very long password via the user login form to exhaust CPU and memory resources on the server...

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

Fluxbb security vulnerabilities

FluxBB is an open source forum application. A denial of service vulnerability exists in Fluxbb 1.5.11. The vulnerability can be exploited to cause a denial of service by sending a very long password via the user login form to exhaust CPU and memory resources on the server...

PT-2013-02: Password Reset Token Prediction in FluxBB

The specialists of Positive Technologies have detected a "Password Reset Token Prediction" vulnerability in FluxBB. The vulnerability was detected in password reset token generation algorithm. FluxBB generates weak random numbers using mtrand function: function randomkey$len, $readable = false,...