Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2016-04-12T15:00:00
Updated: 2016-04-12T14:57:01
Reserved: 2016-03-15T00:00:00
Link: CVE-2016-3167
JSON object: View
NVD Information
Status : Analyzed
Published: 2016-04-12T15:59:04.980
Modified: 2016-04-19T03:20:35.693
Link: CVE-2016-3167
JSON object: View
Redhat Information
No data.
CWE