CVE-2014-10029

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.

• CWE-89

• http://fluxbb.org/forums/viewtopic.php?id=8001Vendor Advisory
• http://packetstormsecurity.com/files/129225/FluxBB-1.5.6-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2014/Nov/73Exploit
• http://secunia.com/advisories/59038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98890
• https://fluxbb.org/development/core/tickets/990/Vendor Advisory
• http://fluxbb.org/forums/viewtopic.php?id=8001Vendor Advisory
• http://packetstormsecurity.com/files/129225/FluxBB-1.5.6-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2014/Nov/73Exploit
• http://secunia.com/advisories/59038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98890
• https://fluxbb.org/development/core/tickets/990/Vendor Advisory

Published

Jan 13, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-10023Multiple SQL injection vulnerabilities in TopicsViewer 3.0 B…
• CVE-2014-10024Multiple integer signedness errors in DirectShowDemuxFilter,…
• CVE-2014-10025Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-10026index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier…
• CVE-2014-10027Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-10028Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 …
• CVE-2014-10030Open redirect vulnerability in forums/login.php in FluxBB be…
• CVE-2014-10031Buffer overflow in the IMAPd service in Qualcomm Eudora Worl…
• CVE-2014-10032SQL injection vulnerability in news_popup.php in Taboada Mac…
• CVE-2014-10033SQL injection vulnerability in the update_zone function in c…
• CVE-2014-10034Multiple SQL injection vulnerabilities in the admin area in …
• CVE-2014-10035Multiple cross-site scripting (XSS) vulnerabilities in the a…