EUVD-2012-4418

Malware in sbrugna...

CVE-2012-4489

Open redirect vulnerability in the secureloginsecureredirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...

Open redirect

Open redirect vulnerability in the secureloginsecureredirect function in the Secure Login module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...

CVE-2012-4489

CVE-2012-4489 describes an open redirect in Drupal’s Secure Login module (7.x-1.x) prior to 7.x-1.3, via the q parameter in securelogin_secure_redirect. An unauthenticated user could lure victims to phishing sites by supplying a malicious redirect URL. Supported by NVD entry and multiple vendor r...