Multiple Open Redirect Vulnerabilities in Drupal Perfecto Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple open redirection vulnerabilities exist in the Drupal Perfecto module. Because the program fails to properly check the url, an attacker can exploit the vulnerabilities would be redirected to an...

SA-CONTRIB-2015-075 - Perfecto - Open Redirect

The Perfecto module allows themers accurately calibrate the CSS by floating compositions over the page. The module doesn't sufficiently check user supplied URLs in parameters used for page redirection. An attacker could trick users to visit malicious sites without realizing it. CVE identifiers...