Description
Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
Remediation
References
Related Vulnerabilities
Microsoft SQL Server Other Vulnerability (CVE-2003-0231)
Apache HTTP Server Incorrect Authorization Vulnerability (CVE-2014-8109)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-3641)
Envoy Proxy Use After Free Vulnerability (CVE-2022-29227)
WordPress Plugin Country State City Dropdown CF7 Security Bypass (2.7.1)