SecuritySpace - CVE-2015-3272

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-3272

Description: Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer header that has a substring match with a local URL.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-3272
http://openwall.com/lists/oss-security/2015/07/13/2
http://www.securitytracker.com/id/1032877

CVE ID:	CVE-2015-3272
Description:	Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer header that has a substring match with a local URL.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3272 http://openwall.com/lists/oss-security/2015/07/13/2 http://www.securitytracker.com/id/1032877