we7cms redirection vulnerability

we7cms is a content management system based on asp.net development. A redirection vulnerability exists in the member center login page /user/login.aspx of we7cms, which allows an attacker to use this vulnerability to lure users to a malicious page via the returnURL parameter to launch a phishing...