PT-2017-6609

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x through 6.34 Drupal versions 7.x through 7.34 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter. This can lead to...

CVE-2015-1051: Undefined Security Weakness

Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter...

CVE-2014-9363

Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

CVE-2014-9363: Undefined Security Weakness

Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

PT-2014-8962

Name of the Vulnerable Software and Affected Versions Drupal Meta tags quick module versions 7.x-2.x before 7.x-2.8 Description The issue allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via the destination parameter in the...

CVE-2012-2727: Improper Input Validation

Open redirect vulnerability in the Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when synchronizing user data, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter...

PT-2012-4216

Name of the Vulnerable Software and Affected Versions Janrain Capture module versions 6.x-1.0 through 7.x-1.0 for Drupal Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter. This occurs when...

CVE-2008-3592: Improper Control of Generation of Code

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing t...

CVE-2007-2047

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2007-2047: Undefined Security Weakness

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2006-5056: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attackers to inject arbitrary web script or HTML via the destination parameter in the Login view...

CVE-2006-3177: Undefined Security Weakness

PHP remote file inclusion vulnerability in Admin/rtfparser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter...