Description
Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
Remediation
References
Related Vulnerabilities
phpMyAdmin Other Vulnerability (CVE-2006-1803)
WordPress Plugin Category Order and Taxonomy Terms Order Cross-Site Scripting (1.4.6)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5264)
Magento Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-9690)
WordPress Plugin Booster for WooCommerce Security Bypass (5.4.3)