CVE-2012-5234

Open redirect in ocPortal’s index.php (vulnerable before 7.1.6) allows remote attackers to redirect users to arbitrary sites via the redirect parameter, enabling phishing scenarios. Affected software: ocPortal before 7.1.6. Root cause: improper handling of the redirect parameter leading to open r...