When you visit https://www.example.com/?q=http://www.google.com, Securepages redirects to external URL.

This has been reported as open redirect flaw during an automated security scans on my site run by www.scanalert.com

Any plans to fix this?

Comments

ki’s picture

ki commented
Title: Open ridirect security vulnerability » Open redirect security vulnerability
Anonymous’s picture

Anonymous (not verified) commented
Assigned: Unassigned »
Status: Active » Closed (fixed)

Couldn't reproduce your problem on 1.8, i just get a "Page not found" page.

Please reopen if your still experiencing problems and i'll see if i can help.

Best,
Paul Booker
Appcoast