Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-3167
6.4
MEDIUMCVSS v2
Published
April 12, 2016
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 6.0, = 6.1, = 6.2, = 6.3, = 6.4, = 6.5, = 6.6, = 6.7, = 6.8, = 6.9, = 6.10, = 6.11, = 6.12, = 6.13, = 6.14, = 6.15, = 6.16, = 6.17, = 6.18, = 6.19, = 6.20, = 6.21, = 6.22, = 6.23, = 6.24, = 6.25, = 6.26, = 6.27, = 6.28, = 6.29, = 6.30, = 6.31, = 6.32, = 6.33, = 6.34, = 6.35, = 6.36, = 6.37NVD
NPM
RubyGems