7.4

CVE-2016-3167

Open redirect vulnerability in the drupal_goto function in Drupal 6.x before 6.38, when used with PHP before 5.4.7, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a double-encoded URL in the "destination" parameter.

Data is provided by the National Vulnerability Database (NVD)
Drupal ≫ Drupal Version6.0 Updatebeta2
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updatebeta3
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updatebeta4
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updatedev
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updaterc1
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updaterc2
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updaterc3
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.0 Updaterc4
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.1
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.2
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.3
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.4
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.5
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.6
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.7
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.8
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.9
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.10
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.11
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.12
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.13
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.14
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.15
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.16
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.17
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.18
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.19
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.20
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.21
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.22
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.23
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.24
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.25
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.26
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.27
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.28
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.29
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.30
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.31
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.32
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.33
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.34
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.35
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.36
   Php ≫ Php Version <= 5.4.6
Drupal ≫ Drupal Version6.37
   Php ≫ Php Version <= 5.4.6
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.63% 0.696
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.4 2.8 4
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N