Design/Logic Flaw

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-16569

Zurmo 3.2.1.57987acc3018 is affected by an open URL redirect via the redirectUrl parameter in app/index.php/meetings/default/createMeeting. This vulnerability allows redirection to an http: URL, enabling potential abuse to redirect users to a malicious domain. The issue is documented across multi...

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access...

CVE-2017-1000027

CVE-2017-1000027 concerns Koozali Foundation SME Server (versions 8.x–10.x). The vulnerability is an open URL redirect in the user web login function, enabling unauthorized account access. The available connected documents confirm the affected product family and the open redirect flaw as the root...

Khan Academy: OPEN URL REDIRECT through PNG files

An abuse of the imageurl parameter when saving a CS program was able to create an arbitrary external redirect. We now validate the parameter before using it. I have found a way through which an attacker can use png files to redirect to malicious domain...

sabacp.com vulnerability

Vulnerable URL: http://www.sabacp.com/website/openurl.php?i=8=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 4352752 Google Pagerank| 0 VIP website status:| No Check sabacp.com SS...

PayPal Inc - Open URL Redirect Web Vulnerability

Document Title: =============== PayPal Inc - Open URL Redirect Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1611 Video: https://www.youtube.com/watch?v=uI1a7EgHNNU Release Date: ============= 2015-10-01 Vulnerability Laboratory ID VL-ID:...

PayPal Inc - Open URL Redirect Web Vulnerability

Document Title: =============== PayPal Inc - Open URL Redirect Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1611 Video: https://www.youtube.com/watch?v=uI1a7EgHNNU Release Date: ============= 2015-10-01 Vulnerability Laboratory ID VL-ID:...

Imgur: Open Url redirection on login with facebook

steps to produce: 1, go to the site imgur.com and login with facebook and if you are new user then u must be asked for username on the link https://imgur.com/register/thirdparty/facebook?redirect=http://imgur.com/ nw just change the parameter redirect= value to https://google.com and hit enter an...

Yahoo!: ads.yahoo.com Unvalidate open url redirection

Thank you for your submission to Yahoo’s Bug Bounty program. While we recognize the effort that you put into the research and writing of a report for us to evaluate, but unfortunately this bug has already been reported to us. We appreciate your adherence to responsible disclosure guidelines and...

Coinbase: Improper Validation of the Referrer header leading to Open URL Redirection

Using a proxy tool such as Burp, set the Target as https://coinbase.com. Then, send the following request: GET /cdn-cgi/l/chkjschl HTTP/1.1 Host: coinbase.com Referer: http://attacker.com Content-Length: 2 Notice the attacker's domain in the Referrer header. This value is not being validated on t...

Yahoo!: Open URL Redirection

Thank you for your submission to Yahoo’s Bug Bounty program. While we recognize the effort that you put into the research and writing of a report for us to evaluate, but this functionality is working as designed. We appreciate your adherence to responsible disclosure guidelines and look forward t...

Facebook Open URL Redirection vulnerability

Security Researcher Dan Melamed discovered an Open URL redirection vulnerability in Facebook that allowed him to have a facebook.com link redirect to any website without restrictions. An open URL Redirection flaw is generally used to convince a user to click on a trusted link which is specially...

Facebook Open URL Redirection vulnerability

Security Researcher Dan Melamed discovered an Open URL redirection vulnerability in Facebook that allowed him to have a facebook.com link redirect to any website without restrictions. An open URL Redirection flaw is generally used to convince a user to click on a trusted link which is specially...

CubeCart 5.0.7 and lower | Open URL Redirection Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

CubeCart 5.0.7 Open URL Redirection

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Open URL Redirection. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...