The Bitrix open redirect vulnerability: a lesson in the absurd
...Bitrix Site Manager 6.5, specifically CVE-2008-2052
2) The vulnerability is a simple one to reproduce, easily exploited by phishers and malware propagators. The issue is still unresolved by the vendor, so here's an example, still available, from their site
http://www.bitrixsoft.com/bitrix/redirect.php?event1=demo out&event2
sm...
