cve/2015/CVE-2015-3232.md

CVE-2015-3232

Description

Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter.

POC

Reference

• https://www.drupal.org/SA-CORE-2015-002
• https://www.drupal.org/SA-CORE-2015-002

Github

No PoCs found on GitHub currently.