Impress CMS 1.3.7 Open Redirect

`#Affected Vendor: http://www.impresscms.org/  
#Date: 03/09/2014  
#Discovered by: JoeV  
#Type of vulnerability: URL Redirection  
  
#Tested on: Windows 7  
  
#Version : 1.3.7  
  
#Description: Impress CMS is susceptible to URL direction attack. When  
a malicious user sends a payload as  
"http://localhost/user.php?xoops_redirect="maliciouslink"", user  
enters the credentials and gets redirected to the malicious link.  
  
  
Payload - http://localhost/user.php?xoops_redirect="malicious link or  
port number"  
  
  
`