Description

Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header.

Remediation

References

CVE-2015-3175

Related Vulnerabilities

WordPress Plugin Custom Website Data Cross-Site Scripting (1.0)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4898)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3278)

Zope Web Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32633)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9404)

Severity

Medium

Classification

CVE-2015-3175

Tags

Missing Update Known Vulnerabilities