Posted by Jing Wang on May 24

*phpwind v8.7 Unvalidated Redirects and Forwards Web Security
Vulnerabilities*

Exploit Title: phpwind v8.7 goto.php? &url Parameter Open Redirect Security
Vulnerabilities
Product: phpwind
Vendor: phpwind
Vulnerable Versions: v8.7
Tested Version: v8.7
Advisory Publication: May 24, 2015
Latest Update: May 24, 2015
Vulnerability Type: URL Redirection to Untrusted Site (‘Open Redirect’)
[CWE-601]
CVE Reference: *
Impact CVSS Severity…